Use two-step ownership transfers instead of single-step ownership transfers
Vulnerability Details
Single-step ownership transfers add the risk of setting an unwanted owner by accident (this includes
address(0)) if the ownership transfer is not done with excessive care.
Context: LinearBoostController.sol
Similar Findings:
https://solodit.xyz/issues/l-07-use-ownable2step-instead-of-ownable-for-access-control-code4rena-particle-protocol-particle-protocol-invitational-git
https://solodit.xyz/issues/l-04-use-code4rena-redacted-cartel-redacted-cartel-contest-git
Impact
If the new address is inactive or not willing to act, there is no way to restore access to that role. Therefore, the owner role can be lost.
Tools
Manual Review
Recommendation
It is recommended to use the Ownable2Step library instead of Ownable library
Lead Judging Commences
ownable-2step
have a 2-step owner transfer
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.