Hawk High

Drscription

The LevelTwo contract, intended to replace LevelOne after the upgrade process, lacks any useful operational logic. It does not provide new functionality, preserve relevant roles or states from LevelOne, or offer any actions related to educational continuation (e.g., new reviews, promotion validation, new session, etc.).

Although the upgrade can technically occur, the system enters a non-operational state after migration, causing a form of functional Denial of Service: students and teachers cannot continue participating in the system, and user expectations are broken.

Impact:

• The system becomes functionally blocked after the upgrade.

• Trust in the educational process is compromised.

• Invariants such as active promotion or student tracking are violated.

• High future risk: graduate() may add critical logic without access restrictions.

Tools Used:

Manual Review, Foundry

Recommended Mitigation:

Implement a minimum continuity structure in LevelTwo, including:

• Validation of studentPromoted.

• New session mechanisms (e.g., startNextPhase()).

• Consistent maintenance of the bursary.

• Add UUPSUpgradeable and _authorizeUpgrade().

• Restrict graduate() to onlyPrincipal to prevent premature executions.