MorpheusAI

MorpheusAI
Foundry
22,500 USDC
View results
Submission Details
Severity: low
Invalid

Single step ownership could be a risk

Summary

Single step ownership transfer is not a good practice.

Vulnerability Details

The ownership of the contracts can be lost as the contracts inherits from the Ownable contract and their ownership can be transferred in a single-step process. If the nominated EOA account is not a valid account, it is entirely possible that the owner may accidentally transfer ownership to an uncontrolled account, losing the access to all functions with the onlyOwner modifier. The address the ownership is changed to should be verified to be active or willing to act as the owner.

Impact

All contracts that implement Ownable pattern/process could become unusable.

Tools Used

Manual review

Recommendations

Consider using the Ownable2Step library over the Ownable library or implementing similar two-step ownership transfer logic into the contract

Updates

Lead Judging Commences

inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Known issue

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.