Kinetic Disclosed Report

Audit report Kinetic Audit Contest

Consider overrides `renounceOwnership` function in `esProtocol.sol`.

Company
Created date
Feb 11 2025

Target

https://github.com/kinetic-market/public-money-market-contracts

Vulnerability Details

The esProtocol.sol contract inherits Ownable2StepUpgradeable contract which consists of renounceOwnership() function to transfer the ownership of a contract to address zero.

If the contract's owner accidentally call this function, all the functions in esProtocol.sol with onlyOwner modifier such as updateRedeemSettings, updateTransferWhitelist & updateBurnRateCalculator will not be able to call again.

Solution:

Add the following line in esProtocol.sol:

 function renounceOwnership() public virtual override onlyOwner {
    revert("Unavailable!");
  }

Validation steps

contract esProtocol is ReentrancyGuardUpgradeable, Ownable2StepUpgradeable, esProtocolStorageV1, ERC20VotesUpgradeable{

The esProtocol.sol contract inherits Ownable2StepUpgradeable contract which consists of renounceOwnership() function

CommentsReport History
Comments on this report are hidden
Details
Statedisclosed
Severity
None
Bounty$143
Visibilitypartially
VulnerabilityDoS with (Unexpected) revert
Participants (3)
company admin
author