Submission Details
Severity:
Use ReentrancyGuardUpgradeable for StabilityPool
Summary
StabilityPool should inherit the upgradeable version of ReentrancyGuard.
Vulnerability Details
contract StabilityPool is IStabilityPool, Initializable, ReentrancyGuard, OwnableUpgradeable, PausableUpgradeable {
// SNIP
}
As shown in the code snippet above, the StabilityPool contract is intended to be upgradeable and inherits the upgradeable versions of Ownable and Pausable.
StabilityPool should also inherit the upgradeable version of ReentrancyGuard to prevent any issues with storage when upgrading in the future.
Impact
Storage corruption in future upgrades
Tools Used
Manual Review
Recommendations
+ contract StabilityPool is IStabilityPool, Initializable, ReentrancyGuardUpgradeable, OwnableUpgradeable, PausableUpgradeable { /* SNIP */ }
Prize pool breakdown
Total prize
77,280 USDC
nSLOC
3,86420 USDC / LOC
74,000
3,280
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.