Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ggonzalez94

Researcher fromOpenZeppelin
#41142of 53,635
6.5Total CVSS
Vulnerabilities · 1
PT-2024-31557
6.5
2024-08-30
Unknown · Cairo-Contracts · CVE-2024-45304
**Name of the Vulnerable Software and Affected Versions** Cairo-Contracts versions prior to 0.16.0 **Description** This issue can lead to unauthorized ownership transfer, contrary to the original owner's intention of leaving the contract without an owner. It introduces a security risk where an unintended party (pending owner) can gain control of the contract after the original owner has renounced ownership. This could also be used by a malicious owner to simulate leaving a contract without an owner, to later regain ownership by previously having proposed himself as a pending owner. **Recommendations** For versions prior to 0.16.0, upgrade to release version 0.16.0 to address this issue. As a temporary workaround, consider restricting access to the contract to minimize the risk of exploitation. There are no known workarounds for this vulnerability, and all users are advised to upgrade to the latest version.