★ Reinitializable implementation (no _disableInitializers)

Evidence summary #

Reinitializable implementation (no `_disableInitializers()`) | Core Bridge implementation `0x3c3d457f1522d3540ab3325aa5f1864e34cba9d0` does NOT call `_disableInitializers()` in its constructor (confirmed via `Implementation.sol` GitHub source). Instead, it uses a custom `initializer` modifier checking `isInitialized(implementation)`. This pattern was the subject of the 2022 $10M Immunefi bounty (uninitialized proxy vulnerability — an attacker was able to call initialize() on a prior implement...

Sources #

Methodology #

Determine whether the implementation contract does not call `_disableInitializers()` in its constructor, leaving re-initialization possible.

See the full factor methodology and distribution across all protocols →