Submission Details
Severity:
Use OpenZepplin Two Step Ownership Instead of Minimal Admin Access Logic
Summary
Adminable is using minimal logic for Admin based functions and transfer of Admin.
Vulnerability Details
Adminable is an abstract contract that has basic access control for admin that can call specific functions. It also has function name transferAdmin which update admin to new admin without performing any necessary checks
Impact
Admin can be transferred to incorrect address mistakenly because of lack of conditions and two step ownership
Tools Used
Manual
Recommendations
Consider using two-step ownership by Open-Zepplin
Updates
Lead Judging Commences
inallhonesty about 1 year ago
Submission Judgement Published Reason: Non-acceptable severity
Assigned finding tags:
Info/Gas/Invalid as per Docs
https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity
Prize pool breakdown
Total prize
53,440 USDC
nSLOC
2,65520 USDC / LOC
45,000 USDC
3,100 USDC
5,340 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.