Immutables, invariants, and upgradability

[jpitts]

Here are the FEM and Twitter discussion about CREATE2 that is relevant to this sub-subject brought up by @rajeevgopalakrishna:

Potential security implications of CREATE2? (EIP-1014)

Not sure if this has been discussed elsewhere/before but I came across this topic today on AllCoreDevs gitter and thought it may be useful to start a thread here. Thanks to @carver and @holiman for initiating this discussion. Summary (per my understanding so far): CREATE2 allows contracts to change in-place after being deployed. This is because, although CREATE2 includes the hash of init_code in address generation, the same init_code could intentionally generate arbitrary contract code. There a…

https://twitter.com/mhswende/status/1093995835518537728