Multiple initialize functions #19
Description
Handle
jonah1005
Vulnerability details
Impact
Multiple initialize functions of floatToken. An attacker may front-runinitializeFloatToken transaction with initialize and mock the exact behaviors and grant the attacker's owner role.
Proof of Concept
Tools Used
None
Recommended Mitigation Steps
While the dev team is aware of this and leaves the comment in the contract, over-ride the initialize function would possibly clear the uncertainty.
function initialize(
string memory name,
string memory symbol
) public initializer override {
revert("!authorized")
}