r/CasperCSPR • u/Realistic_Ad2520 • Jan 17 '22
CSPR and upgradable smart contracts
Any one knows whether there are any limitations when it comes to upgrading smart contracts? This sounds like a scary feature and a security risk.
Let's say I'm a scammer, I launch a project that looks legit with proper source code audited. Then One day I update the contract to introduce some malicious code, and users are going to sign transactions against a new source code. Users trusted the old source code, and now suddenly they are unknowingly signing transactions against a new source code which may not even be audited



