Description
Admin transfer in KeyringCoreV2Base is performed at once, possibly setting the admin to an incorrect address. To mitigate this risk, protocols usually implement a 2 step mechanism, where a pending admin is set who has to call acceptAdmin() in order for the admin to actually change. This ensures that the admin is always correctly set.
Recommendation
Implement the 2 step mechanism.
Status
Acknowledged