Submission Details
Severity:
VaultControllerStrategy cannot be upgraded
Summary
VaultControllerStrategy does not have the _authorizeupgrade function which makes upgrade impossible.
Vulnerability Details
VaultControllerStrategy is a base contract which has the // storage gap for upgradeability
uint256[4] private __gap;
It does not have the _authorizeupgrade function which means it cannot be upgraded
Impact
Owner cannot upgrade this contract
Tools Used
Manual Review
Recommendations
add this:
/**
* @dev Checks authorization for contract upgrades
*/
function _authorizeUpgrade(address) internal override onlyOwner {}
Prize pool breakdown
Total prize
50,000 USDC
nSLOC
2,53020 USDC / LOC
42,000 USDC
4,250 USDC
3,750 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.