code-423n4 / 2022-01-insure-findings

2 stars 0 forks source link

`initialize` function was disable by `constructor()` #275

Closed code423n4 closed 2 years ago

code423n4 commented 2 years ago

Handle

Fitraldys

Vulnerability details

Impact

in line https://github.com/code-423n4/2022-01-insure/blob/main/contracts/CDSTemplate.sol#L75 constructor set initialized to true but in line https://github.com/code-423n4/2022-01-insure/blob/main/contracts/CDSTemplate.sol#L98 function initialize has require to initialized to be false, that means the function initialize will never pass the require check.

Proof of Concept

https://github.com/code-423n4/2022-01-insure/blob/main/contracts/CDSTemplate.sol#L75 https://github.com/code-423n4/2022-01-insure/blob/main/contracts/CDSTemplate.sol#L98

oishun1112 commented 2 years ago

https://github.com/code-423n4/2022-01-insure-findings/issues/48