Submission Details
Severity:
The `UpdateWeightRunner` contract admin can't be changed
Summary
The UpdateWeightRunner.quantammAdmin is immutable. So in case of the address compromising it can't be changed and the important contract functionality could be controlled by a malicious user.
Vulnerability Details
address public immutable quantammAdmin;
Impact
Unexpected behavior, potential assets losses
Tools used
Manual Review
Recommendations
Consider implementing functionality for the admin address changing.
Prize pool breakdown
Total prize
49,600 OP
nSLOC
3,00017 OP / LOC
44,640
4,960
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.