Project

One World
NFTDeFi
15,000 USDC
View results
Submission Details
Severity: high
Invalid

M1: The "MembershipFactory " Function Does Not Update Already Deployed Implementations

Summary
When the Administrator updates the implementation of MembershipERC1155, it should also update the MembershipERC1155 instances that have already been deployed; otherwise, they will continue to use the outdated logic.

Vulnerability Details
For example:

User Alice creates a DAO with Implementation 1.
The Administrator updates the implementation in the MembershipFactory class to Implementation 2.
When Alice creates a new DAO, this new DAO will use the logic of Implementation 2. However, the first DAO will still be using the logic from Implementation 1.
Impact
This can lead to inconsistencies, as some users may continue using the old DAO with outdated logic.

Tools Used
Manual Review

Recommendations
Ensure that previously deployed instances are also updated to the new implementation.

Updates

Lead Judging Commences

0xbrivan2 Lead Judge 8 months ago
Submission Judgement Published
Invalidated
Reason: Lack of quality

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.