Tadle

Summary

Vulnerability Details

The protocol uses Ownable from OpenZeppelin which is not ideal for protocols where it can leave the contract without owner if they transfer the ownership to a wrong address.

Single Step ownership transfer is dangerous as if the transfer is made to an incorrect address, the contract will be with no owner, and the role will be lost forever.

Impact

All onlyOwner() functions will not be callable by the Tadle team

Tools Used

Manual review

Recommendations

Use OZ::Ownable2StepUpgradeable.sol instead of single step ownership transfer.