Submission Details
Severity:
PuppyRaffle::changeFeeAddress allows to change the owner directly
Summary
PuppyRaffle.changeFeeAddress() changes the owner in one step and doesn't validate the acceptance capability of the new owner.
Vulnerability Details
the new owner can be zero address or a contract that couldn't handle the calls of
PuppyRafflecalls.
Impact
severity : low
likelihood : low
Tools Used
manual verification
Recommendations
Inherit the Ownable2Step of openZeppelin instead of Ownable.
Updates
Lead Judging Commences
Hamiltonite almost 2 years ago
Submission Judgement Published Reason: User experience and design improvement
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.