Skip to content
Request an audit

‹ All findings

When changing addresses, use 2 step transfer and/or contract size and/or address 0x0 checks

Low/InfoFuji Finance·Three Sigma · Lending aggregator · 6th May, 20233S-FUJI-L07

Description

When changing important addresses, it's best to use additional safety measures to prevent wrong addresses from being set. When the address to change is guaranteed to be a smart

solidity
contract, a isContract check is very helpful. Another layer of protection is using 2 step
address transfer, in which a pending role is set first and only then, from the pending role

account, it accepts the new role.

Recommendation

Check every address setter and use the mentioned patterns.

Status

Acknowledged with the following statement: The optimization identified is acknowledged by the Fuji team. However, as indicated the issue is of low severity. During Q3 we will be working on optimizations that will improve general patterns within our contracts.