Skip to content
Request an audit

‹ Findings database

Ownable2Step should be preferred over Ownable

Low/InfoMetaZero Omnichain NFTs audit·Three Sigma·Omnichain RWA tokenisation·27th January, 20243S-MetaZero-L03

Description

Ownable performs a simple ownership transfer by setting the owner to a new address.

This is dangerous and could result in an invalid owner being set. Ownable2Step performs additional checks by setting a pending owner which has then to accept the ownership.

Consider using it instead.

Status

Acknowledged

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests