First Flight #19: Mondrian Wallet v2

Summary

Hardcoded Addresses Risk: The use of hardcoded addresses for BOOTLOADER_FORMAL_ADDRESS and DEPLOYER_SYSTEM_CONTRACT can be problematic if these addresses change or if the contract is deployed in different environments. This approach reduces the contract's flexibility and adaptability.

Vulnerability Details:

• Relying on hardcoded addresses can lead to issues if the addresses need to be updated or if the contract is deployed in a new environment where different addresses are required.

Impact:

• Reduced flexibility and adaptability of the contract, potentially leading to deployment issues and maintenance challenges.

Tools Used:

• 👀 (Visual Inspection)

• Audit Wizard

• AI

Recommendations:

• Make critical addresses, such as BOOTLOADER_FORMAL_ADDRESS and DEPLOYER_SYSTEM_CONTRACT, configurable through constructor parameters or initialization settings. This enhancement will improve the contract's flexibility, allowing it to adapt to different deployment environments and address changes more easily.