mediumAccess controlEVM-Solidity
Rigor Protocol: Incorrect initialization of smart contracts with Access Control issue
- Payout
- $0
- Protocol
- Rigor Protocol
- Disclosed
- Aug 7, 2026
- Source
- code4rena
Rigor Protocol's upgradeable contracts ship with initialize() functions that lack any caller authorization, and its proxy deployments pass an empty data field so initialization is deferred until after deployment. In the intervening window, a mempool-watching a …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2022-08-rigor-findings/issues/6
- https://github.com/code-423n4/2022-08-rigor-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.