Submission Details
Severity:
Use two-step ownership transfer
Summary
When changing the owner, it is preferable to have the new
owner send a transaction to accept the ownership, just in
case the original owner enters the wrong address.
Vulnerability Details
The owner can change the owner with the transferOwnership function. However, if the owner
is changed incorrectly by entering the wrong address, it cannot be taken back.
https://github.com/Cyfrin/2023-07-beedle/blob/main/src/utils/Ownable.sol#L19
function transferOwnership(address _owner) public virtual onlyOwner {
owner = _owner;
emit OwnershipTransferred(msg.sender, _owner);
}
Impact
Informational
Recommendations
Use
OZ.Ownable2StepUpgradeable.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
70628 USDC / LOC
18,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.