MyCut

First Flight #23
Beginner FriendlyFoundry
100 EXP
View results
Submission Details
Severity: high
Invalid

Incorrect Invocation of Ownable Constructor

Summary

The Ownable constructor is incorrectly invoked with msg.sender in Pot.sol. Despite the Ownable contract from OpenZeppelin automatically setting the owner to the msg.sender during deployment. This misuse of inheritance could lead to potential deployment issues.

Vulnerability Details

Impact

Could also lead to an incorrect assignment of ownership or unexpected behavior, which is critical for access control and could result in the loss of administrative rights.

Tools Used

Manual Review

Recommendations

The msg.sender should not be passed to Ownable since the Ownable contract already handles the owner assignment internally. The contract should transfer ownership within the constructor.

Updates

Lead Judging Commences

equious Lead Judge 12 months ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.