Use Ownable2Step instead of Ownable
Summary
Contract SoulboundProfileNFT currently uses the OpenZeppelin's Ownable library. There is a risk that the contract owner accidentally calls method renounceOwnership() thus changing the contract owner to zero address or accidentally tranferring the ownership to a wrong address.
Impact
Possible complete loss of ownership of the contract.
Recommendations
Change the inherit from Ownable to Ownable2Step in order to prevent loss of the contract's ownership. Ownable2Step provides functionallity that only an address who can claim the ownership can become an owner.
Appeal created
Informational or Gas
Please read the CodeHawks documentation to know which submissions are valid. If you disagree, provide a coded PoC and explain the real likelyhood and the detailed impact on the mainnet without any supposition (if, it could, etc) to prove your point.
Rewards breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.