20,000 USDC
View results
Submission Details
Severity: medium
Valid

Use a two-step ownership transfer approach

Summary

Use a two-step ownership transfer approach

Vulnerability Details

There is method with the onlyOwner modifier in Beedle.sol and Staking.sol also uses Ownalbe library which shows that the owner role is an important one.Make sure to use a two-step ownership transfer approach by using Ownable2Step from OpenZeppelin as opposed to Ownable as it gives you the security of not unintentionally sending the owner role to an address you do not control.

setFeeReceiver function in Lender.sol also uses single step tranfer of feeReceiver role.Use two-step transfer for important roles.

Impact

Low

Tools Used

Recommendations

use a two-step onwership transfer approach by using Owanble2Step from OpenZeppelin as opposed to Ownable.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.