MorpheusAI

Summary

The ownership of the contracts can be lost as they inherit from the Ownable contract and their ownership can be transferred in a single-step process. If the nominated EOA account is not valid, the owner may accidentally transfer ownership to an uncontrolled account, losing access to all functions with the onlyOwner modifier. The address where the ownership is changed should be verified as active or willing to act as the owner.

Contracts affected:

• MOR.sol

• StETHMock.sol

Tools Used

Manual Analysis

Recommendations

Consider using the Ownable2Step library over the Ownable library or implementing similar two-step ownership transfer logic into the contract.