mantlenetworkio / mantle

Mantle | Mass adoption of decentralized & token-governed technologies. With Mantle Network, Mantle Treasury, and token holder-governed products initiatives.

Home Page:https://www.mantle.xyz

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

[OZ][L03][contracts]:Disable Implementation Contract

Ethanncnm opened this issue · comments

commented

Describe the bug
The L1StandardBridge implementation contract sets the messenger to the zero address,
but this doesn't prevent it from being initialized.
In the interest of limiting the attack surface, consider ensuring the implementation contract
cannot be initialized. This could be achieved by setting the messenger to an unused non-zero
address.