Steadefi
Steadefi
DeFiHardhatFoundryOracle
35,000 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

`GMXVault` Owner can renounce Ownership

0xhals

Summary

GMXVault Owner can renounce Ownership

Vulnerability Details

GMXVault contract extends openzeppelin.Ownable library where it has a function that enable the owner from renouncing ownership (via renounceOwnership) where the owner of the vault contract will be removed and set to address(0).

Impact

Renouncing ownership will render the vault in a dangerous state as some of the vital functionalities are only accessible by the vault owner (such as emergencyResume, emergencyClose , updateTreasury functions).

Proof of Concept

GMXVault contract

import { Ownable } from "@openzeppelin/contracts/access/Ownable.sol";

Tools Used

Manual Review.

Recommendations

Override the inherited renounceOwnership function to revert whenever called by the owner:

+ function renounceOwnership() public override onlyOwner {
+ revert("not allowed");
+ }
Updates

Lead Judging Commences

hans Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.