QA Report

[code423n4]

Lack of ACK during owner change

It's possible to lose the ownership under specific circumstances.

Because an human error it's possible to set a new invalid owner. When you want to change the owner's address it's better to propose a new owner, and then accept this ownership with the new wallet.

Affected source code:

• OwnableProxyDelegation.sol#L56
• YearnVaultStorage.sol#L13
• BeefyVaultStorage.sol#L8
• YearnCurveVaultOperator.sol#L42

[obatirou]

Lack of ACK during owner change (disputed)

Already surfaced in precedent audit and readme