Critical owner address change in a one-step process is risky
Summary
Critical owner address change in a one-step process is risky.
Vulnerability Details
The contracts lack two-step role transfer.
Contract ownership plays a critical role in the protocol. The ownership management of this contract defaults to Ownable’s transferOwnership and renounceOwnership methods. Such critical address changing in one step is risky because it is irrecoverable from any mistakes.
Impact
It is irrecoverable if the owner is set to the wrong address.
Tools Used
Manual review.
Recommendations
It is recommended to implement a two-step role transfer where the role recipient is set and
then the recipient has to claim that role to finalize the role transfer.
Lead Judging Commences
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.