20,000 USDC
View results
Submission Details
Severity: medium
Valid

Use Ownable2Step instead of Ownable

Summary

Vulnerability Details

The current protocol uses an Ownable contract which has a direct ownership transfer function to it.
Ownable2Step prevents the contract ownership from mistakenly being transferred to an address that cannot handle it (e.g. due to a typo in the address), by requiring that the recipient of the owner permissions actively accept via a contract call of its own.

Impact

The current Ownable contract might end up mistakenly being set to an incorrect (contract) address. Which would mean the admin would not have other owner privileges.

Tools Used

Manual Review.

Recommendations

Use Ownable2Step instead of Ownable contract.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.