Skip to content
Request an audit

‹ Findings database

Missing disableInitializers() call in StandardIDOPool::constructor()

Low/InfoBlast IDO Pools audit·Three Sigma·IDO launchpad·7th August, 2024I-3

Description

The implementation contract StandardIDOPool can be initialized by an attacker, although it can not do anything with it.

Recommendation

Call _disableInitializers() in the constructor of StandardIDOPool.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests