hats-finance / illuminex-0x0bb4aa1f58719707405c231fcdf0b405714799cf

0 stars 1 forks source link

Accidental `renounceOwnership()` call can disrupt key operations in multiple contracts. #29

Open hats-bug-reporter[bot] opened 3 months ago

hats-bug-reporter[bot] commented 3 months ago

Github username: @erictee2802 Twitter username: 0xEricTee Submission hash (on-chain): 0x1e6166fc6d7e973cb2c08c637bcae963ec77d351feb3bd4c3553300e1fb01d60 Severity: low

Description: Description\

Ownable contains a function named renounceOwnership() which can be used to remove the ownership of contracts in a protocol.

This can lead toBitcoinProver, VaultBitcoinWallet& AllowedRelayers contracts becoming disowned, which will then break critical functions of the protocol.

Attack Scenario\

Accidental renounceOwnership()call can disrupt key operations in multiple contracts.

Attachments

NA

  1. Proof of Concept (PoC) File

Manual Analysis

  1. Revised Code File (Optional)
    • Consider override this function to prevent accidental call to renounceOwnership.
rotcivegaf commented 3 months ago

Non issue