Submission Details
Severity:
Lack of zero address check in changeOwner function
Summary
The changeOwner function allows the owner to be set to the zero address (0x0000000000000000000000000000000000000000). If ownership is assigned to the zero address, it would effectively make the contract ownerless, preventing further control of the contract.
Vulnerability Details
The function allows ownership to be set to the zero address, which could render the contract ownerless and uncontrollable.
Tools Used
Manual
Recommendations
Add a require statement to ensure the new owner is not the zero address
function changeOwner(address _newOwner) public {
require(_newOwner != address(0), "New owner cannot be the zero address");
owner = _newOwner;
}
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.