Submission Details
Severity:
The owner is a single point of failure and a centralization risk
Summary
[M-2] The owner is a single point of failure and a centralization risk
Having a single EOA as the only owner of contracts is a large centralization risk and a single point of failure. A single private key may be taken in a hack, or the sole holder of the key may become unable to retrieve the key when necessary, or the single owner can become malicious and perform a rug-pull. Consider changing to a multi-signature setup, and or having a role-based authorization model.
file: /contracts/oracles/ChainlinkARBOracle.sol
236 function addTokenPriceFeed(address token, address feed) external onlyOwner {
249 function addTokenMaxDelay(address token, uint256 maxDelay) external onlyOwner {
273 function emergencyPause() external onlyOwner whenNotPaused {
file: /contracts/strategy/gmx/GMXVault.sol
536 function emergencyResume() external payable onlyOwner {
595 function updateTrove(address trove) external onlyOwner {
Prize pool breakdown
Total prize
35,000 USDC
nSLOC
2,28915 USDC / LOC
33,000 USDC
2,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.