Submission Details
Severity:
Immutable Owner Address
Description: The WToken::owner address is set in the constructor and cannot be changed afterward. This creates a single point of failure and prevents ownership transfer if needed.
Impact:
No way to transfer ownership if needed
If owner key is compromised, no way to secure contract
If owner address is lost, contract becomes partially unusable
Recommended Mitigation: Implement the Ownable pattern from OpenZeppelin or add ownership transfer functionality.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
51929 USDC / LOC
14,000
1,000
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.