Submission Details
Severity:
No restriction of changeOwner function
Summary
There's no restriction to change owner in changeOwner function.
Vulnerability Details
Anyone can call changeOwner function to be owner.
Impact
The contract is controlled by malicious user so funds can be stolen.
Tools Used
Manual review
Recommendations
function changeOwner(address _newOwner) public {
require(msg.sender == owner, "Only owner can call")
owner = _newOwner;
}
Updates
Appeal created
inallhonesty 9 months ago
Submission Judgement Published Assigned finding tags:
Anyone can change owner
Rewards breakdown
nSLOC
86This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.