blockchainPromedium

[Blackbox] Web3_Governance

caplag

Task: UUPS proxy with TreasuryImplementation contract. Solution: Implementation contract was never initialized, allowing ownership takeover via direct initialize() call, then upgradeToAndCall() to hijack the proxy.

$ ls tags/ techniques/
blockchainproxyweb3anviluupseip1967governanceuninitializedupgradetreasuryevm_bytecode
uups_uninitialized_implementationevm_bytecode_reverse_engineeringproxy_storage_slot_analysispush32_string_extractionimplementation_takeover
🔒

Permission denied (requires tier.pro)

Sign in to access full writeups

Sign in with GitHub to continue. No email required.

$sign in

$ grep --similar

Similar writeups