Tadle

Summary

The UpgradeableProxy smart contract is a payable contract, without any way to withraw the funds sent to it.

Vulnerability Details

The contract is made payable:

The contract includes a payable function to accept Ether but lacks a corresponding function to withdraw it, which leads to the Ether being locked in the contract.

Impact

The funds sent accidentally to the contract will be locked in the contract forever.

Tools Used

• Manual Code Review

Recommended Mitigation

To resolve this issue, please implement a public or external function that allows for the withdrawal of Ether from the contract.