Assessment reports>Blackwing>Discussion>Front-run

Front-run on initialize

Both BlackwingVault and BlackwingVaultToken utilize the initialize() function for contract initialization. The lack of an owner check could potentially expose it to front-running during deployment. However, the team is leveraging OpenZeppelin's Upgradeable contracts. This involves deploying the proxy contract and initializing it in the same transaction, providing protection against front-running attacks in this particular scenario.

Zellic © 2025Back to top ↑