Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

OWNABLE CONTRACT HAS A SINGLE STEP OWNERSHIP TRANSFER #2105

Open
codehawks-bot opened this issue Aug 8, 2023 · 0 comments
Open

OWNABLE CONTRACT HAS A SINGLE STEP OWNERSHIP TRANSFER #2105

codehawks-bot opened this issue Aug 8, 2023 · 0 comments
Labels
ai-dup-1412 ai-dup-1484 finding-ownership-transfer low

Comments

@codehawks-bot
Copy link

OWNABLE CONTRACT HAS A SINGLE STEP OWNERSHIP TRANSFER

Severity

Low Risk

Relevant GitHub Links

https://github.com/Cyfrin/2023-07-beedle/blob/main/src/utils/Ownable.sol#L19

Vulnerability Details

The transferOwnership function transfers contract ownership in a single
step. If the owner of a contract were set to an address not controlled
by the Team, the contract would be impossible to recover.

Recommendations

Implement 2-step Ownable
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
ai-dup-1412 ai-dup-1484 finding-ownership-transfer low
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@PatrickAlphaC @codehawks-bot