Lines of code

Vulnerability details

Impact

Ownership of a Position could be transferred to zero address. This is usually caused by mistake but the consequence is loss of collateral.

Proof of Concept

The position owner calls transferOwnership but accidentally set newOwner address to 0x0.

Tools Used

Manual review

Recommended Mitigation Steps

• Use 2 step ownership transfer like this OpenZeppellin contract in which the new owner is required to call acceptOwnership. That’s the best practice.
• Or at least check for zero address like the simple OpenZeppellin contract

The text was updated successfully, but these errors were encountered:

All reactions