Content
@
0 reply
0 recast
0 reaction
sudo rm -rf --no-preserve-root /
@pcaversaccio
Let's think this through: Someone successfully social engineers Circle into leaking their upgrader key, the person upgrades USDC with a version that removes blacklisting and revokes all permissions including admin for upgrades (before you tell me it's not possible to set it to 0x00, remember I can set it to 0xdead for example). What would happen after?
4 replies
0 recast
5 reactions
Cassie Heart
@cassie
They'd do an upgrade the same way projects without upgradability in contracts do: announce the issue, warn all transactions on or after the hacked block will be reverted, and restore the state of the contract at the block prior to a new contract
1 reply
0 recast
0 reaction
sudo rm -rf --no-preserve-root /
@pcaversaccio
They can't do anymore upgrades. They would need to create a new USDC contract. Now what about all the contracts that hardcoded the original USDC address?
1 reply
0 recast
1 reaction
