Early rate$2,400 of senior audit time for $500. Early members keep the rate as it climbs.$2,400 of senior audit time for $500See how →
F-2025-0008·access-control

One-step ownership transfer in setTeam

FixedlendingmonadveToken
TL;DR

The setTeam function transferred privileged ownership in a single step with no confirmation from the new owner, creating risk of permanent loss of control if a typo, wrong address, or compromised key is used.

Severity
LOW
Impact
HIGH
Likelihood
LOW
Method
MManual review
CAT.
Complexity
LOW
Exploitability
LOW
02Section · Description

Description

The setTeam function transferred the protocol's "team" privilege to a new address in one step, without requiring the new address to claim or confirm the transfer. A single typo or compromised key during the transfer call would permanently transfer control to an unintended address.

03Section · Impact

Impact

Permanent loss of administrative control if the wrong address is used. No recovery path without re-deploying or relying on other privileged escape hatches.

04Section · Recommendation

Recommendation

Implement a two-step ownership transfer pattern (similar to OpenZeppelin's Ownable2Step) where the new address must explicitly accept the role before the transfer completes.

Composable Security ID: NRL-6c19a5e-L01. Neverland Money: Fixed. Composable Security: Fix verified during retest.

Status
Fixed
Fix commit
816c394500f1
Fix date
2025-08-22
F-2025-0008