Project

Vulnerability Details

If a vulnerability is discovered in membershiperc155.sol in the future, a pausing mechanism allows for freeing contract interactions temporarily to prevent further exploitation especially for sensitive functions like function claimProfit and function callExternalContract.
it also ensures that no state changes occur while the contract is being upgraded, ensuring consistency and security during the transition when adding new features or fixing vulnerabilities.

Impact

inability to mitigate fast attacks
risk of inconsistencies in upgrades

Tools Used

manual review

Recommendations

consider the use of pausableUpgradable contract from openzeppelin