Description: The contract doesn't provide any mechanism to transfer ownership, which could be problematic if the owner's private key is compromised or if ownership needs to be transferred to a different entity.
The contract sets the owner at deployment but lacks functionality to update it:
Impact: If the owner's private key is lost or compromised, there's no way to update the contract's administrative controls, potentially leaving the contract in a state where emergency functions like rescue_tokens
cannot be called.
Recommended Mitigation: Implement a secure ownership transfer mechanism as described in the previous vulnerability.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.