Lines of code

Vulnerability details

Impact

The CToken implements an _acceptAdmin function that sets the new admin to the pendingAdmin.
But CToken does not implement a _setPendingAdmin function to set the pendingAdmin in the first place.
Therefore, the _acceptAdmin function is useless and CTokens can never change their admin, breaking the desired functionality.

Recommended Mitigation Steps

Add a _setPendingAdmin function to CToken as in UniTroller or remove the _acceptAdmin function if the admin should never be changed.

The text was updated successfully, but these errors were encountered:

All reactions