Git-Mirrors/blockchains-security-toolkit
1
0
Fork 0
mirror of https://github.com/autistic-symposium/blockchains-security-toolkit.git synced 2025-05-14 04:32:17 -04:00
Code Issues Projects Releases Packages Wiki Activity
blockchains-security-toolkit/vulnerabilities/proxies.md
bt3gl f82a1c77b4 🍩 rename vulns
2022-09-23 13:42:46 -07:00

743 B
Raw Blame History

🐊 Proxies


TL;DR Proxies Patterns


Transparent Proxy Pattern (TPP)

  1. upgrade logic is stored in proxy itself.
  2. gas-inefficient

Universal Upgradable Proxy Standard (UUPS)

  1. upgrade logic is stored in logic itself
  2. gas-efficient

Unitialized proxy bug


  • Developers might leave proxies unitialized - this can be a problem when it leads to changes such as granting ownership to the caller
  • the owners of the contract can upgrade the implementation contract
  • this bug can lead to the self-destruction of the implementation contract (proxy contract is bricked)

Resources