Skip to content
Request an audit

‹ All findings

Missing _disableInitializers() call in the constructor

Low/InfoClip Finance Strategy Upgrade·by the Three Sigma team·DeFi infrastructure·15th March 20243S-Clip-L02

Report PageSource

Description

PCLBaseSwapInside() is missing a _disableInitializers() call in the constructor, allowing the implementation contract to be initialized. This is not a security concern at the moment but could be in a future version of the implementation.

Recommendation

Add _disableInitializers() to the constructor.

Status

Addressed in #0c8de23.

Found during Three Sigma’s team review · 0xSimao on the review team