Submission Details
Severity:
SmartVaultV3::setOwner function does not validate new owner address
Summary
SmartVaultV3::setOwner function does not validate new owner address
Vulnerability Details
SmartVaultV3::setOwner function does not validate new owner address. The function does not validate the '_newOwner' address. It should ideally ensure that '_newOwner' is not a zero address (address(0)) to prevent the contract from being left without an effective owner, which could result in a loss of administrative control over the contract.
Impact
an accidental or incorrect setting of the new owner to a zero address leads to loss of admin control over the contract. this is a critical role.
Tools Used
Manual
Recommendations
require(_newOwner != address(0), "New owner cannot be the zero address");
owner = _newOwner;
}```
Updates
Lead Judging Commences
hrishibhat over 1 year ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
informational/invalid
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933 USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.