60,000 USDC
Submission Details
Severity:
Missing call to _disableInitializers
Summary
Vulnerability Details
Missing call to _disableInitializers for UUPSUpgradeable (UUPSOwnableProxied is inherited from this contract and used in Starklane contract) - UUPSUpgradeable can be initialized in the implementation contract
Impact
Tools Used
Recommendations
Adding call to _disableInitializersinside `Starklane` contract constructor
Updates
Lead Judging Commences
n0kto 9 months ago
Submission Judgement Published Reason: Lack of quality
Assigned finding tags:
finding-initialize-on-implementation
Likelyhood: Low/Medium Impact: Very low, the attacker can at most run the protocol on their side and lead a phishing campaign with an address deployed by Ark.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,30126 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.