★ Reinitializable implementation (no _disableInitializers)

Evidence summary #

VersionedInitializable uses a version integer stored in unstructured storage to prevent re-initialization. It does NOT call _disableInitializers() in the constructor (predates that OZ pattern). Implementation contract could in theory be initialized directly if version slot is in default state, though this would not affect proxy-delegated user funds. Latent footgun; has not been triggered in 50 months of v3.x upgrades.

Sources #

Methodology #

Determine whether the implementation contract does not call `_disableInitializers()` in its constructor, leaving re-initialization possible.

See the full factor methodology and distribution across all protocols →