Submission Details
Severity:
Two step change of ownership missing
Summary
Ownership can be changed incorrectly
Vulnerability Details
OpenZeppelin Ownable contracts change ownership in a single step which is insecure
Impact
Can result in loss of ownership as ownership sent to faulty incorrect address. Can result in ownership transferred to entity that has lost control of keys so cant action onlyOwner details. Can result in ownership to malicious person by error. Ownership must be claimed to ensure new owner has control of keys
Tools Used
Manual Analysis
Recommendations
Use OpenZeppelin Ownable2Step contracts
Updates
Lead Judging Commences
Hamiltonite over 1 year ago
Submission Judgement Published Reason: User experience and design improvement
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.