Findings

Issue 01

The Proxy mechanism provides flexibility when trying to change the logic of a contract on the fly. However, there are many pitfalls to be aware of when working with upgradeable contracts (such as https://docs.openzeppelin.com/upgrades-plugins/1.x/writing-upgradeable#modifying-your-contracts).

For this reason, we recommend considering whether or not the benefits outweigh the downsides.

Recommendation

If the proxy pattern is used, we recommend adding a TimeLock when updating the underlying logic in order to have enough time for investors to be aware of the updated implementation.

Note

The team resolved the issue by delaying the actual upgrade of the implementation contact.

Last updated