### 2.3 Upgrade Risk
- Pool contract needs upgrading as use cases expand
- **Immutable contracts** = can't fix bugs
- **Mutable contracts** = governance attack vector
- **Severity**: Medium | **Likelihood**: Medium