code-423n4 / 2021-08-notional-findings

3 stars 0 forks source link

NoteERC20 missing initial ownership event #74

Open code423n4 opened 3 years ago

code423n4 commented 3 years ago

Handle

cmichel

Vulnerability details

Vulnerability Details

The NoteERC20.initialize function does not emit an initial OwnershipTransferred event.

Recommended Mitigation Steps

In initialize, emit OwnershipTransferred(address(0), owner_).