Flow

Vulnerability Details

The onlyAdmin modifier restricts certain functions to the admin account. However, if the admin address is accidentally set to an unusable address, such as address(0), or if the admin’s private key is lost, all onlyAdmin functions will become permanently inaccessible.

Impact

Without a fallback or recovery mechanism, the contract could be rendered unusable if the admin account is lost or compromised, potentially locking out essential functions. This could lead to a complete loss of functionality in critical cases.

Tools Used

Manual analysis

Recommendations

Consider implementing a secondary mechanism, such as an emergency reset or a multi-admin model, allowing contract recovery if the admin role is compromised or lost.