Summary: Implements UUPS proxy pattern.

Vulnerability Details:

• Upgradeability Checks: SWC-112: Ensure only authorized upgrades occur.
  Severity: High

  require(msg.sender == admin, "Unauthorized upgrade");

  Line: 74

• Delegatecall Risks: SWC-114: Can introduce risks if not handled properly.
  Severity: High

  (bool success, ) = implementation.delegatecall(data);

  Line: 92

Impact: Unauthorized upgrades or corrupted state.

Tools Used: Manual code inspection.

Recommendations:

• Upgradeability Fix: Apply stricter checks on upgrades.

  require(hasRole(UPGRADER_ROLE, msg.sender), "Unauthorized upgrade");

• Delegatecall Fix: Ensure safe usage of delegatecall.

  (bool success, ) = implementation.delegatecall(data);