Summary
When the Administrator updates the implementation of MembershipERC1155, it should also update the MembershipERC1155 instances that have already been deployed; otherwise, they will continue to use the outdated logic.
Vulnerability Details
For example:
User Alice creates a DAO with Implementation 1.
The Administrator updates the implementation in the MembershipFactory class to Implementation 2.
When Alice creates a new DAO, this new DAO will use the logic of Implementation 2. However, the first DAO will still be using the logic from Implementation 1.
Impact
This can lead to inconsistencies, as some users may continue using the old DAO with outdated logic.
Tools Used
Manual Review
Recommendations
Ensure that previously deployed instances are also updated to the new implementation.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.