You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Non-upgradeable Pausable in UUPS contracts may cause issues
Summary
The use of Pausable rather than UpgradeablePausable in an upgradeable contract system has been reported as a valid bug in the audits of the other contract (Ethos Network Social Contracts). Here is the report of the findings: sherlock-audit/2024-10-ethos-network-judging#145
Square Cinnamon Wolverine
Medium
Non-upgradeable Pausable in UUPS contracts may cause issues
Summary
The use of Pausable rather than UpgradeablePausable in an upgradeable contract system has been reported as a valid bug in the audits of the other contract (Ethos Network Social Contracts). Here is the report of the findings: sherlock-audit/2024-10-ethos-network-judging#145
This same bug is also noticeable in this contract
Root Cause
https://github.com/sherlock-audit/2024-11-ethos-network-ii/blob/main/ethos/packages/contracts/contracts/ReputationMarket.sol#L36
https://github.com/sherlock-audit/2024-11-ethos-network-ii/blob/main/ethos/packages/contracts/contracts/utils/AccessControl.sol#L15
Internal pre-conditions
No response
External pre-conditions
No response
Attack Path
No response
Impact
No response
PoC
No response
Mitigation
Replace Pausable with UpgradeablePausable in all upgradeable contracts within the system.
The text was updated successfully, but these errors were encountered: