transfer of `Adminable` should use a two step process
Summary
When transferring ownership in the Adminable contract it should use a two-step process where the admin transfers the ownership then the new owner has to accept the admin. this prevents transferring admin to a wrong or inactive address
Vulnerability Details
the admin role can be transferred to an inactive address, making all function calls with the onlyAdminmodifier uncallable.
Impact
the impact of the vulnerability is that the new admin can be transferred to an inactive address preventing the protocol from using the functions with the onlyAdmin modifier
Tools Used
Manual Audit
Recommendations
use a two-step admin transfer to change the admin
Lead Judging Commences
Info/Gas/Invalid as per Docs
https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.