Vyper Vested Claims
First Flight #34
Beginner FriendlyDeFi
100 EXP
View results
Previous Next
Submission Details
Severity: low
Invalid

Missing Event for Ownership Transfer

mishraji874

Description: The contract lacks functionality for ownership transfer, and even if implemented, there is no event to log ownership changes for off-chain monitoring. The contract defines an owner state variable but does not include functions for transferring ownership or events for logging ownership changes.

Impact: The lack of ownership transfer functionality prevents the project from updating the contract administrator if needed, creating a single point of failure if the owner's private key is compromised or lost.

Recommended Mitigation: Implement a proper ownership transfer function with appropriate events:

event OwnershipTransferred:
previous_owner: indexed(address)
new_owner: indexed(address)
​
@external
def transfer_ownership(new_owner: address):
self.onlyOwner()
assert new_owner != empty(address), "New owner is the zero address"
old_owner: address = self.owner
self.owner = new_owner
log OwnershipTransferred(old_owner, new_owner)
Updates

Appeal created

bube Lead Judge 6 months ago
Submission Judgement Published
Invalidated
Reason: Design choice

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.