20,000 USDC
View results
Submission Details
Severity: medium
Valid

using ownable instead of ownable2step allow transfer ownership (e.g. due to a typo in the address) by mistake to random address

vulnerability details

Ownable2Step and Ownable2StepUpgradeable prevent the contract ownership from mistakenly being transferred to an address that cannot handle it (e.g. due to a typo in the address), by requiring that the recipient of the owner permissions actively accept via a contract call of its own.

recommendations

use Ownable2Step contract from openzeppelin library

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.