UUPSUpgradeable Vulnerability Post-mortem

[spalladino]

@gnarvaja

If you are thinking about major changes, perhaps you may want to consider adding protection on who can run initialize .

The guidelines are now to make it impossible for anyone to run initialize on an implementation contract, by adding an empty constructor with the initializer modifier. So the implementation contract gets initialized automatically upon deployment.