Hawk High

Summary

LevelOne has graduateAndUpgrade(address _levelTwo, bytes memory). This function is missing in LevelTwo

• LevelTwo has graduate() This function is missing in LevelOne

Vulnerability Details

• LevelOne has graduateAndUpgrade(address _levelTwo, bytes memory)

• LevelTwo has graduate()

if those are supposedly interchangeable, this leads to:

• Different function signatures

• Different initialization patterns

if those are not supposedly interchangeable:

• LevelOne has a function that is missing in LevelTwo

• LevelTwo has a function that is missing in LevelOne

Impact

• Upgrade process breaks

• State transition fails

• Contract becomes stuck

• Potential for unauthorized upgrades

Tools Used

Function signature analysis

Recommendations

• Align function signatures

• Implement consistent upgrade logic

• Add proper access controls

• Add validation for upgrade process

• Add comprehensive tests for upgrade process