TempleGold

TempleDAO
Foundry
25,000 USDC
View results
Submission Details
Severity: low
Invalid

TempleGoldAdmin contract can't call to TempleGold's `transferOwnership()` and `renounceOwnership()`

Summary

Vulnerability Details

https://github.com/Cyfrin/2024-07-templegold/blob/57a3e597e9199f9e9e0c26aab2123332eb19cc28/protocol/contracts/templegold/TempleGoldAdmin.sol#L20

TempleGoldAdmin contract is TempleGold contract's owner. It contains all the logic to call to TempleGold functions that required being owner to call, except transferOwnership() and renounceOwnership() function

Impact

This will lead to TempleGold contract can't switch to the new owner or renouce the owner once the TempleGold ownership transferred to TempleGoldAdmin contract

Tools Used

Manual review

Recommendations

Add logic to call to TempleGold's transferOwnership() and renounceOwnership() in TempleGoldAdmin contract

Updates

Lead Judging Commences

inallhonesty Lead Judge 11 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.