Lack of a mechanism to transfer ownership and state variable `KittyConnect::i_kittyConnectOwner` declared as an immutable makes it impossible to transfer the ownership of `KittyConnect`
Summary
One of the roles of the protocol is the owner of KittyConnect, this role is given the power to assign a new owner of the contract but this task is impossible to accomplish for two reasons:
KittyConnect::i_kittyConnectOwneris declared as animmutablestate variable.immutablestate variables are initialized during deployment and cannot be changed afterLack of logic to transfer the ownership of
KittyConnect. The contract does not provide any method to assign ownership to a new account
Impact
Ownership of the contract cannot be transferred.
Tools Used
Manual review
Recommendations
Consider the following mitigations:
Do not declare the owner of
KittyConnectas animmutablestate variable
Consider implementing the
Ownablelibrary from OpenZeppelin to manage ownership of the contract
Lead Judging Commences
Owner can't transfer ownership as Contest Details say.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.