Summary

Vulnerability Details

To change the owner address, the current contract owner can call the
Ownable.transferOwnership() function and set a new address and this new
address assumes the role immediately.
If the new address is inactive or not willing to act in the role, there
is no way to restore access to that role. Therefore, the owner role can
be lost.

Impact

Loss of ownership of the contract and freeze of contract since setContest cannot be used.

Tools Used

Manual Review

Recommendations

Use the Ownable2Step variant of the Ownable contract to better safeguard against accidental transfers of access control.