TempleGold
TempleDAO
Foundry
25,000 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Missing ownership management in `TempleGoldAdmin`

jesjupyter

Summary

TempleGoldAdmin is used as the admin of TempleGolde, however, the owner-related operations like transferOwnership could not be used. This could lead to the ownership of TempleGold could not be safely transferred under some urgent scenarios.

Vulnerability Details

TempleGoldAdmin is used as the admin of TempleGold. It will act as a proxy to Temple Gold contract.

function setStaking(address _staking) external override onlyElevatedAccess {
templeGold.setStaking(_staking);
}

So TempleGoldAdmin is actually the owner. However, there is no function exposed in TempleGoldAdmin to interact with TempleGold to transfer ownership.

This could lead to the ownership of TempleGold being frozen and could not be safely transferred under some urgent scenarios.

Impact

The ownership of TempleGold being frozen and could not be safely transferred under some urgent scenarios.

Tools Used

Manual

Recommendations

It is recommended to add a transferOwner function to transferOwnership of TempleGold.

Updates

Lead Judging Commences

inallhonesty Lead Judge 11 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.