Submission Details
Severity:
Lack of input validation in function `changeOwner`
Summary
Lack of input validation in function changeOwner allows the owner to set the contract ownership to the zero address (0x0).
Vulnerability Details
The changeOwner() function does not validate the new owner address. This allows the owner to set the contract ownership to the zero address (0x0).
Impact
This could make the contract effectively unusable or unmanageable since no one would have control over it anymore.
Tools Used
Manual review.
Recommendations
Add a validation to ensure that the new owner address is valid (i.e., not the zero address). For example:
function changeOwner(address _newOwner) public {
require(_newOwner != address(0), "Invalid new owner");
owner = _newOwner;
}
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.