SINGLE STEP OWNERSHIP TRANSFER PROCESS
Summary
The ownership of the contracts can be lost as the contracts inherits from the Ownable contract and their ownership can be transferred
in a single-step process. If the nominated EOA account is not a valid account, it is entirely possible that the owner may accidentally transfer ownership to
an uncontrolled account, losing the access to all functions with the onlyOwner modifier. The address the ownership is changed to should be verified to be active or willing to act as the owner
Contracts affected:
SDLPoolCCIPController.sol
RESDLTokenBridge.sol
WrappedTokenBridge
LinearBoostController
RewardsInitiator
Tools Used
Manual Analysis
Recommendations
Consider using the Ownable2Step library over the Ownable library or implementing similar two-step ownership transfer logic into the contract
Lead Judging Commences
ownable-2step
have a 2-step owner transfer
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.