20,000 USDC
View results
Submission Details
Severity: medium

Centralisation risk for trusted owners

Summary

Having a single EOA as the only owner of contracts is a large centralization risk and a single point of failure.

Vulnerability Details

Owner keys if hacked can be used by a malicious actor using critical functions with to cause potential loss to the project and it users.

Impact

A single private key may be taken in a hack, or the sole holder of the key may become unable to retrieve the key when necessary.

Tools Used

Manual Code Review

Recommendations

Consider changing to a multi-signature setup, or having a role-based authorization model.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.