hats-finance / Spectra-0x4b792db3d2a5d1c1ccf9938380756b200c240e5d

Other
0 stars 0 forks source link

PausableUpgradeable is not initialized #2

Open hats-bug-reporter[bot] opened 3 days ago

hats-bug-reporter[bot] commented 3 days ago

Github username: @rilwan99 Twitter username: Ril11111 Submission hash (on-chain): 0x6f9ae2bfc42be8f59f721169bec15459b8d33eee4458af6c452049d1b504f29a Severity: high

Description: Description\ Router.sol inherits from PausableUpgradeable.sol, however fails to initialie it via __Pausable_init(). This oversight can lead to the PausableUpgradeable contract not being properly initialized, which might cause unexpected behavior when attempting to use pause-related functionality.

Attack Scenario\ An attacker could exploit the uninitialized state of the PausableUpgradeable contract to bypass pause-related checks, potentially allowing unauthorized actions to be executed when the contract is expected to be paused.

Attachments

  1. Proof of Concept (PoC) File

  2. Revised Code File (Optional)

yanisepfl commented 1 day ago

Hello, We classified this issue as invalid because:

Thanks