Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Ggonzalez94

Researcher fromOpenZeppelin
#43336of 56,333
6.5Total CVSS
Vulnerabilities · 1
PT-2024-31557
6.5
2024-08-30
Unknown · Cairo-Contracts · CVE-2024-45304
**Name of the Vulnerable Software and Affected Versions** Cairo-Contracts versions prior to 0.16.0 **Description** This issue can lead to unauthorized ownership transfer, contrary to the original owner's intention of leaving the contract without an owner. It introduces a security risk where an unintended party (pending owner) can gain control of the contract after the original owner has renounced ownership. This could also be used by a malicious owner to simulate leaving a contract without an owner, to later regain ownership by previously having proposed himself as a pending owner. **Recommendations** For versions prior to 0.16.0, upgrade to release version 0.16.0 to address this issue. As a temporary workaround, consider restricting access to the contract to minimize the risk of exploitation. There are no known workarounds for this vulnerability, and all users are advised to upgrade to the latest version.