20,000 USDC
View results
Submission Details
Severity: medium
Valid

[M-01] transferOwnership should not be sent to address(0)

Summary

It is possible that the current owner can transfer ownership to address(0) in the transferOwnership function of the Ownable contract.

Vulnerability Details

Knowing Centralization Risk for trusted owners, it should be verified that the transfer of ownership does not go to an address(0), this would harm everything the project as we saw it detailed, without the possibility of recovery.

Impact

If it happens, several functionalities would be unsuitable

Tools Used

Manual code review

Recommendations

Add a statement that checks cannot be transferred to address(0)

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.