Submission Details
Severity:
The owner can be changed during the NFT transfer.
Summary
The owner can be changed during the NFT transfer.
Vulnerability Details
According to Known Issues information:
setOwner can change control of the vault, but this can only be completed by the SmartVaultManager contract, and is only called when completing an NFT transfer
setOwner() donot have any state checks.
Impact
VaultManager can change the owner at any time, which may impact all functions related to owner operations.
Tools Used
Recommendations
Add parameters for state checks to setOwner().
Updates
Lead Judging Commences
hrishibhat over 1 year ago
Submission Judgement Published Reason: Design choice
Assigned finding tags:
informational/invalid
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933 USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.