Submission Details
Impact:
Likelihood:
Upgraded contract uses initializer instead of reinitializer, breaking upgrades
ThunderLoanUpgraded is intended to be an upgrade to an existing proxy contract. However, its initialize function uses the initializer modifier. Since the proxy has already been initialized, calling initialize during the upgrade will revert. Consequently, new state variables like s_flashLoanFee will remain uninitialized (0), and the oracle will not be initialized, breaking core functionality.
Rewards breakdown
This contest has a flat reward structure with the following payouts:
Live
The contest is live. Earn rewards by submitting a finding.
Judging
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsRewards Distribution
The contest is complete and the rewards are being distributed.