Submission Details
Severity:
Ownership Transfer Process (2-step)
Summary
The contract allows direct transfer of ownership without a confirmation step, which is risky as it might be changed accidentally or maliciously.
Impact
Implement a 2-step ownership transfer process where the current owner nominates a new owner, and the new owner must accept the nomination. This ensures that ownership cannot be transferred without the new owner's consent.
Recommendations
address public pendingOwner;
function transferOwnership(address _newOwner) external onlyOwner {
if (_newOwner == address(0)) revert InvalidAddress();
pendingOwner = _newOwner;
}
function acceptOwnership() external {
if (msg.sender != pendingOwner) revert NotOwner();
owner = pendingOwner;
pendingOwner = address(0);
emit OwnershipTransferred(owner); // Emit an event to record the transfer
}
event OwnershipTransferred(address indexed newOwner);
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
66230
USDC / LOC
16,000 USDC
2,500 USDC
1,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.