Skip to content

Conversation

@nvtaveras
Copy link

@nvtaveras nvtaveras commented Jan 18, 2026

Finding: https://cantina.0dns.co/448

When we made StabilityPool upgradeable, we forgot to initialize P inside the initializer. Its old initialization only affected the implementation contract. This wasn't caught in our tests because we didn't update the tests to use actual proxies, we instead deployed it without disabling initializers.

@bowd bowd merged commit 3f3860f into feat/mento-v3 Jan 18, 2026
14 checks passed
@bowd bowd deleted the fix/initialize-p branch January 18, 2026 21:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants