MorpheusAI

Summary

https://github.com/Cyfrin/2024-01-Morpheus/blob/main/contracts/L1Sender.sol#L9

L1Sender is an upgradable contract and inherits ERC165 instead of ERC165Upgradeable which can results into potential clashes in upgradabilty and storage slots

Impact

1. Not using ERC165Upgradeable could give potential crash risk during upgrading the contract - Medium

2. Also in Distributor.sol it uses SafeERC20 for IERC20 instead of SafeERC20Upgradeable. It doesn't any impact but OpenZeppelin recommned to use SafeERC20Upgradeable - Low

check here

Tools Used

Manual

Recommendations

Make use of OpenZeppelins upgradeable version i.e ERC165Upgradeable and SafeERC20Upgradeable instead of ERC165 and SafeERC20