QA Report

[code423n4]

[L-01] Missing checks for address(0x0) when assigning values to address state variables.

Code in Question

https://github.com/code-423n4/2022-08-rigor/blob/main/contracts/Project.sol#L94-L105

[L-02] Missing Initializer modifier

OpenZeppelin recommends that the initializer modifier be applied to constructors in order to avoid potential griefs, social engineering, or exploits. Ensure that the modifier is applied to the implementation contract. If the default constructor is currently being used, it should be changed to be an explicit one with the modifier applied.

Code in Question

https://github.com/code-423n4/2022-08-rigor/blob/main/contracts/ProjectFactory.sol#L16-L20