Hawk High

Summary

The LevelTwo.sol contract lacks proper initialization and upgradeability implementation, making it vulnerable to initialization issues and preventing proper contract upgrades.

Vulnerability Details

• Missing initialize function despite importing Initializable

• No implementation of UUPSUpgradeable pattern

• Contract state variables remain uninitialized

Impact

High: Contract cannot be properly initialized or upgraded, leading to potential undefined behavior and loss of functionality.

Tools Used

• Manual code review

• OpenZeppelin documentation

Recommendations

1. Implement initialize function to set up initial state

1. Add UUPSUpgradeable and implement _authorizeUpgrade