First Flight #12: Kitty Connect

Summary

The kittyConnect.sol::i_kittyConnectOwner variable is currently declared as immutable, preventing future ownership transfers.

Vulnerability Details

Immutable variables, once set during deployment, remain unchanged thereafter. If the owner's wallet is compromised or lost, critical functionalities may be impacted such as adding new shops, source and destinations chains or senders to the allow lists.

Tools Used

Manual review.

Recommendations

Consider declaring the variable as mutable. Additionally, implement a function allowing ownership transfers, restricted to only the current owner's invocation.