MorpheusAI
MorpheusAI
Foundry
22,500 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

`onlyOwner` functions not accessible if `owner` renounces ownership

oualidpro

Summary

onlyOwner functions not accessible if owner renounces ownership

Vulnerability Details

The owner is able to perform some privileged activities, but it's possible to set the owner to address(0). This can represent a risk if the ownership is renounced for any reason.
All functions that are protected by the onlyOwner Modifier
File: contracts/MOR.sol

function mint(address account_, uint256 amount_) external onlyOwner {
_mint(account_, amount_);
}

File: contracts/mock/tokens/StETHMock.sol

function mint(address account_, uint256 amount_) external onlyOwner {
_mint(account_, amount_);
}

Impact

Renouncing ownership will leave the contract without an owner, therefore limiting any functionality that needs authority. For example, the contract will not be able to mint any new tokens for users.

Tools Used

Manual Review

Recommendations

Either override the renounceOwnership() function or make it two steps to avoid accidental renounce.

Updates

Lead Judging Commences

inallhonesty Lead Judge
over 1 year ago
inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Known issue

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.