Summary

The init functions of reseed can by initialized more than once by anyone.

Vulnerability Details

Let's take an example of ReseedWhitelist.sol#init() function:

This function can be called by anyone as many times as possible with any parameters.

Similarly, init function in ReseedSun.sol, ReseedSilo.sol, ReseedInternalBalances.sol, ReseedField.sol, ReseedBean.sol, ReseedBarn.sol also have the same issue.

Impact

This can break the accounting and integrity of the whole protocol.

Tools Used

Manual Analysis

Recommendations

Init functions should only be able to be called once while deploying. Also, enforce only owner to be able to call the init function.