SettlementSignatureVerifier is missing disableInitializers call and due to the usage of a proxy upgradeable contract without callingthis functionin the constructor of the logic contract. This oversight introduces a severe risk, allowing potential attackers to initialize the implementation contract itself.
Call disableInitializers: include a call todisableInitializersin the constructor of the logic contract as recommended by OpenZeppelin.
SettlementSignatureVerifier.sol
