Timelock Controller

April 12, 2023 ยท View on GitHub

Configuration

  • Check: pess-timelock-controller
  • Severity: High
  • Confidence: Low

Description

The detector sees if a contract contains an openzeppelin timelock-contoller implementation.

Vulnerable Scenario

The deploy address can govern the contract bypassing timelock-controller limitations. test scenario

Recommendation

Remove Proposer and Executor roles from the deployer address after deploy.