1. Soroban Smart Contract Vulnerability: Unprotected `initialize` Functions Open Arena, Factory, Payout to Front-Running Admin Takeover
A critical Day-1 security vulnerability has been identified in multiple Soroban smart contracts, exposing the entire protocol to immediate administrative takeover. The `initialize` functions within the Arena, Factory, and Payout contracts are publicly callable by any address. This design flaw allows any observer of the...