Submission Details
Severity:
Use Ownable2Step instead of Ownable
Summary
Ownable2Step and Ownable2StepUpgradeable prevent the contract ownership from mistakenly being transferred to an address that cannot handle it (e.g. due to a typo in the address), by requiring that the recipient of the owner permissions actively accept via a contract call of its own.
Vulnerability details
SDLPoolPrimary.sol ( #L19 ):
contract WrappedTokenBridge is Ownable, CCIPReceiver {
RewardsInitiator.sol ( #L16 ):
contract RewardsInitiator is Ownable {
RESDLTokenBridge.sol ( #L16 ):
contract RESDLTokenBridge is Ownable {
SDLPoolCCIPController.sol ( #L13 ):
abstract contract SDLPoolCCIPController is Ownable, CCIPReceiver {
LinearBoostController.sol ( #L10 ):
contract LinearBoostController is Ownable {
Tools Used
Manual Analysis
Updates
Lead Judging Commences
0kage over 1 year ago
Submission Judgement Published Assigned finding tags:
ownable-2step
have a 2-step owner transfer
Prize pool breakdown
Total prize
27,500 USDC
nSLOC
1,41419 USDC / LOC
25,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.