Hawk High

Summary

The principal can not change.

Vulnerability Details

If the principal resigns and another have to take his place, there is no function to do so.
Because the principal address is initialized once and for all.
There should be a function allowing him to set a new principal to take his place in case of resignation.

Impact

Unable to take in consideration the case of a principal resignation. Which is a possibility in real world.

Tools Used

Manual review, Github.

Recommendations

Implement a function allowing the principal to set a new principal address to take his place in case of resignation.
This function can take a new principal address in parameter which will be saved as "future principal". And another function will allow the new principal to validate and save his address as the actual principal.