Dria

Summary

LLMOracleManager.sol does not use OpenZeppelin's _disableInitializers(); modifier, thus opening the path for any future re-initialization from unwanted actors.

Vulnerability Details

LLMOracleManager.sol does not use OpenZeppelin's _disableInitializers(); modifier, thus leaving the protocol's critical functionalities like deciding the platform fee accessible to malicious actors.

Impact

If not handled carefully, an attacker can initialize the contract and set critical functionality to their own liking, like platform fees and disrupt the platform's functionality.

Tools Used

Manual review.

Recommendations

Use _disableInitializers();