20,000 USDC
View results
Submission Details
Severity: medium
Valid

Use `Ownable2Step` rather than `Ownable`.

Summary

Use Ownable2Step rather than Ownable.

Vulnerability Details

Ownable2Step and Ownable2StepUpgradeable prevent the contract ownership from mistakenly being transferred to an address that cannot handle it (e.g. due to a typo in the address), by requiring that the recipient of the owner permissions actively accept via a contract call of its own.

Impact

There are 2 instances of this issue:

File: 2023-07-beedle/src/Lender.sol

10: contract Lender is Ownable {

File: 2023-07-beedle/src/Staking.sol

11: contract Staking is Ownable {

Tools Used

Manual code review

Recommendations

Consider using Ownable2Step instead of Ownable.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.