You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Description: Description
Router.sol inherits from PausableUpgradeable.sol, however fails to initialie it via __Pausable_init(). This oversight can lead to the PausableUpgradeable contract not being properly initialized, which might cause unexpected behavior when attempting to use pause-related functionality.
Attack Scenario
An attacker could exploit the uninitialized state of the PausableUpgradeable contract to bypass pause-related checks, potentially allowing unauthorized actions to be executed when the contract is expected to be paused.
Attachments
Proof of Concept (PoC) File
Revised Code File (Optional)
The text was updated successfully, but these errors were encountered:
Hello,
We classified this issue as invalid because:
It does not result in direct theft of user funds.
The PausableUpgradeable contract does not need to be initialized to work properly: it mainly consists of the paused state variable, which is initialized to false by default.
Github username: @rilwan99
Twitter username: Ril11111
Submission hash (on-chain): 0x6f9ae2bfc42be8f59f721169bec15459b8d33eee4458af6c452049d1b504f29a
Severity: high
Description:
Description
Router.sol inherits from PausableUpgradeable.sol, however fails to initialie it via
__Pausable_init()
. This oversight can lead to the PausableUpgradeable contract not being properly initialized, which might cause unexpected behavior when attempting to use pause-related functionality.Attack Scenario
An attacker could exploit the uninitialized state of the PausableUpgradeable contract to bypass pause-related checks, potentially allowing unauthorized actions to be executed when the contract is expected to be paused.
Attachments
The text was updated successfully, but these errors were encountered: