Submission Details
Severity:
[I-3] Enhance safety by explicitly setting the owner address in the constructor
Summary
The owner is currently set within the VestedAirdrop::__init__ constructor using the msg.sender value. For enhanced safety, it is recommended to explicitly pass the intended owner address as an argument during contract deployment.
Impact
An incorrect deployment could inadvertently assign ownership to an unintended EOA or contract.
Recommendations
Modify the constructor to accept the owner as an argument:
- def __init__(merkle_root: bytes32, token: address, vesting_start_time: uint256, vesting_end_time: uint256):
+ def __init__(merkle_root: bytes32, token: address, vesting_start_time: uint256, vesting_end_time: uint256, owner: address):
Rewards breakdown
nSLOC
127This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.