Zogi Labs - Bezoge

One or more logic contracts do not protect their initializers. An attacker can call the initializer and assume ownership of the logic contract, whereby she can perform privileged operations that trick unsuspecting users into believing that she is the owner of the upgradeable contract. ```solidity=13 contract ZogiBridge is PausableUpgradeable,ReentrancyGuardUpgradeable, ``` - `ZogiBridge` is an upgradeable contract that does not protect its initializer. ```solidity=33 function init(address zogiAddr, uint256 bridgeFee_, uint256 percentageDecimals_, uint256[]memory chainIds_, ``` - `init` is an unprotected initializer function. --- ```solidity=10 contract Conversion is OwnableUpgradeable,Percentage{ ``` - `Conversion` is an upgradeable contract that does not protect its initializer. ```solidity=19 function init(address bezogeToken_, address zogiToken_, uint256 minWrapAmount_, ``` - `init` is an unprotected initializer function.