Hawk High

Description:

The principal address is never initialized or assigned in the contract. In an upgradeable pattern, failing to initialize such privileged roles opens the door to misconfiguration or exploitation (e.g., leaving the role unset or defaulted to address(0)).

Impact:

If principal is used in access control checks, the logic may be broken or anyone could exploit unset roles depending on implementation elsewhere.

Tools Used

Manual review
Chatgpt

Recommendations

Implement an initialize() function that sets the principal and usdc addresses. Ensure the function includes initializer modifier to prevent re-initialization: