Skip to content

TRC-003 OwnershipRetrieval

Description

When Owner permissions are set to a black hole address, it is still possible to fetch owner permissions back to an actionable address.

Risk Pattern

function lock(uint256 time) public virtual onlyOwner {
  _previousOwner = _owner;
  _owner = address(0);
}

function unlock() public virtual {
  require(_previousOwner == msg.sender, );
  _owner = _previousOwner;
}

Risk Samples