Initialization Timeframe Vulnerability in `CredToken.sol` & `OneShot.sol`
Description
The Credibility and OneShot contracts exhibit an initialization timeframe vulnerability. This means that there is a period between contract deployment and the explicit call to setStreetsContract during which _streetsContract remains uninitialized.
Impact
The impact of this vulnerability is that during the initialization timeframe, the address of the Streets contract is not set in the _streetsContract variable and is set to the zero address, potentially exposing the contract to unintended behaviour.
Tools Used
Manual Review
Recommendations
To mitigate the initialization timeframe vulnerability, consider initializing _streetsContract during the contract's deployment in the constructor.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.