Skip to content

Commit 16c644c

Browse files
razwwclaude
andcommitted
fix(audit): drop redundant leaf gap from NPM
Bailsec Issue_02 (Informational). NonfungiblePositionManager is the leaf of its inheritance chain — nothing inherits from it — so a leaf __gap reserves slots that no child contract's layout would otherwise depend on. Per OZ convention, storage gaps belong on base contracts, not leaves. Future state additions to NPM just append after _tokenDescriptor regardless. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 parent a70be9c commit 16c644c

1 file changed

Lines changed: 0 additions & 2 deletions

File tree

src/periphery/NonfungiblePositionManager.sol

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -73,8 +73,6 @@ contract NonfungiblePositionManager is
7373
/// @dev The address of the token descriptor contract, which handles generating token URIs for position tokens
7474
address private _tokenDescriptor;
7575

76-
uint256[45] private __gap;
77-
7876
constructor(address _factory, address _WETH9) PeripheryImmutableState(_factory, _WETH9) {}
7977

8078
function initialize(address _tokenDescriptor_) external initializer {

0 commit comments

Comments
 (0)