Submission Details
Impact:
Likelihood:
Missing zero-address checks and uninitialized implementation contracts
The OracleUpgradeable contract lacks a constructor with _disableInitializers(), leaving the implementation contract uninitialized. Additionally, the __Oracle_init_unchained function does not validate the poolFactoryAddress against the zero address.
Rewards breakdown
This contest has a flat reward structure with the following payouts:
Live
The contest is live. Earn rewards by submitting a finding.
Judging
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsRewards Distribution
The contest is complete and the rewards are being distributed.