Flow
Sablier
FoundryDeFi
20,000 USDC
View results
Previous Next
Submission Details
Severity: medium
Invalid

Lack of Initial Admin Assignment

asar

Vulnerability Details

The contract does not include an initial assignment of the admin address, leaving it unassigned by default. This setup would make it impossible to perform any onlyAdmin functions until the admin address is set, which could lead to deployment issues or misuse.

Impact

This issue poses a significant risk during deployment, as the contract’s core functionality relies on the presence of an admin. Without initial assignment, there is no guarantee that the contract will have a functional admin account after deployment.

Tools Used

Manual analysis

Recommendations

Implement a constructor that sets the admin upon contract deployment. For example:

constructor(address initialAdmin) {
admin = initialAdmin;
}
Updates

Lead Judging Commences

inallhonesty Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.