Solady Proxy Initialization Function Call Failure Vulnerability

A vulnerability exists in Solady versions 0.0.125 prior to 0.1.24, where calling the initialization function of a contract deployed via a proxy can lead to a silent failure. This issue arises if the initialization function does not return a boolean or any other data, as regular Solidity relies on the 'extcodesize' function to determine the success of the call. This method is inadequate when the proxy points to an empty implementation.

Impact

The vulnerability can cause a silent failure when initializing contracts through a proxy, leading to unintended behavior or state.

Remediation

Users are advised to upgrade to Solady version 0.1.24 or later. Additionally, deploy any affected implementations and their factories on new EVM chains as soon as possible.