Submission Details
Severity:
Adminable::transferAdmin() Lacks Zero Address Check (Improper Input Validation + Potential Privilege Loss)
Description
The Adminable::transferAdmin() function does not validate that the newAdmin parameter is not the zero address. Without this check, transferring admin privileges to the zero address can result in loss of control over administrative functions, as the zero address cannot execute actions or receive permissions.
Impact
Loss of control over administrative functions
Recommended Mitigation
In the Adminable::transferAdmin() function, add the following check:
function transferAdmin(address newAdmin) public virtual override onlyAdmin {
+ require(newAdmin != address(0), "Adminable: new admin is the zero address");
// Effect: update the admin.
admin = newAdmin;
// Log the transfer of the admin.
emit IAdminable.TransferAdmin({ oldAdmin: msg.sender, newAdmin: newAdmin });
}
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
69929 USDC / LOC
19,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.