The RAACReleaseOrchestrator contract sets the raacToken variable as immutable during construction. There is no setter function provided to update this variable. Consequently, if an incorrect RAAC token address is provided during deployment, the contract cannot be upgraded or modified to use the correct token address, potentially limiting operational flexibility.
• Careful Deployment Verification:
Ensure that the correct RAAC token address is thoroughly verified before deployment.
• Consider Proxy Pattern (if upgradeability is desired):
If future flexibility is a concern, consider using an upgradeable proxy pattern. This allows changes to critical parameters like the token address post-deployment.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.