Core Contracts
Regnum Aurum Acquisition Corp
HardhatReal World AssetsNFT
77,280 USDC
View results
Previous Next
Submission Details
Severity: low
Invalid

Not in LightChaser Report : Missing 2 step ownership transfer in ZENOFactory && ZENO

ghostbytes

Description

The ZENOFactory contract lacks a secure two-step ownership transfer mechanism, allowing immediate reassignment of ownership. This increases the risk of accidental or malicious takeovers, as ownership can be transferred without confirmation from the new owner.\

// https://github.com/Cyfrin/2025-02-raac/blob/89ccb062e2b175374d40d824263a4c0b601bcb7f/contracts/zeno/ZENOFactory.sol#L79-L85
function transferZenoOwnership(
uint256 index,
address newOwner
) external onlyOwner {
ZENO zeno = zenos[index];
zeno.transferOwnership(newOwner);
}

Recommendations

- contract ZENOFactory is Ownable {
+ contract ZENOFactory is Ownable2Step {
​
- contract ZENO is IZENO, ERC20, Ownable, ReentrancyGuard {
+ contract ZENO is IZENO, ERC20, Ownable2Step, ReentrancyGuard {
Updates

Lead Judging Commences

inallhonesty Lead Judge 3 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.