First Flight #21: KittyFi
First Flight #21
Beginner FriendlyDeFiFoundry
100 EXP
View results
Previous Next
Submission Details
Severity: medium
Invalid

Absence of Function to Update meowntainer Address in KittyVault.sol

heim

Summary

The contract does not have a mechanism to update the meowntainer address, which is crucial if the original address is compromised or needs to be rotated.

Vulnerability Details

  • Location: Absence of a function to update the meowntainer address.

  • Description: Without an update mechanism, the contract could become vulnerable if the meowntainer address is compromised or needs to be replaced. This rigidity poses significant long-term risks.

Impact

  • Severity: Medium

  • Effect: Losing control over the meowntainer address can hinder the contract's operation or expose it to unauthorized actions, leading to severe disruptions and security breaches

Tools Used

Manual code review

Recommendations

Introduce a function to securely update the meowntainer address, incorporating proper authorization checks.

function updateMeowntainer(address _newMeowntainer) external onlyMeowntainer {
require(_newMeowntainer != address(0), "New meowntainer address cannot be zero address");
meowntainer = _newMeowntainer;
}
Updates

Lead Judging Commences

shikhar229169 Lead Judge 11 months ago
Submission Judgement Published
Invalidated
Reason: Design choice

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.