Sablier

Sablier
DeFiFoundry
53,440 USDC
View results
Submission Details
Severity: low
Invalid

transfer of `Adminable` should use a two step process

Summary

When transferring ownership in the Adminable contract it should use a two-step process where the admin transfers the ownership then the new owner has to accept the admin. this prevents transferring admin to a wrong or inactive address

Vulnerability Details

the admin role can be transferred to an inactive address, making all function calls with the onlyAdminmodifier uncallable.

Impact

the impact of the vulnerability is that the new admin can be transferred to an inactive address preventing the protocol from using the functions with the onlyAdmin modifier

Tools Used

Manual Audit

Recommendations

use a two-step admin transfer to change the admin

Updates

Lead Judging Commences

inallhonesty Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

Info/Gas/Invalid as per Docs

https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.