Meland.ai
Search…
⌃K

Findings

Issue 01

Type
Severity
Status
Owner Capabilities / Centralization
Medium
Resolved
The Proxy mechanism provides flexibility when trying to change the logic of a contract on the fly. However, there are many pitfalls to be aware of when working with upgradeable contracts (such as https://docs.openzeppelin.com/upgrades-plugins/1.x/writing-upgradeable#modifying-your-contracts).
For this reason, we recommend considering whether or not the benefits outweigh the downsides.
Recommendation
If the proxy pattern is used, we recommend adding a TimeLock when updating the underlying logic in order to have enough time for investors to be aware of the updated implementation.
Note
The team resolved the issue by delaying the actual upgrade of the implementation contact.