Submission Details
Impact:
Likelihood:
`LevelTwo` is not a UUPSUpgradeable contract, thus preventing further upgrades to the school system
Summary
LevelTwo is not a UUPSUpgradeable contract. Once the school system has been upgraded from LevelOne to LevelTwo, any further upgrades to the proxy and LevelTwo are impossible.
Impact
Impact: Low, the school system proxy contract and LevelTwo implementation are stuck from any further upgrades
Likelihood: High, principal will upgrade school system at the end of school session (after 4 weeks)
Severity: Low
Tools Used
Manual review
Recommendations
Make LevelTwo contract a UUPSUpgradeable contract to allow for further upgrades
LevelTwo
+ import {UUPSUpgradeable} from "@openzeppelin/contracts-upgradeable/proxy/utils/UUPSUpgradeable.sol";
.
.
.
+ modifier onlyPrincipal() {
+ if (msg.sender != principal) {
+ revert HH__NotPrincipal();
+ }
+ _;
+ }
.
.
.
+ contract LevelTwo is Initializable, UUPSUpgradeable {
- contract LevelTwo is Initializable {
.
.
.
+ function _authorizeUpgrade(address newImplementation) internal override onlyPrincipal {}
Rewards breakdown
nSLOC
243This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.