Timelock Controller
April 12, 2023 ยท View on GitHub
Configuration
- Check:
pess-timelock-controller - Severity:
High - Confidence:
Low
Description
The detector sees if a contract contains an openzeppelin timelock-contoller implementation.
Vulnerable Scenario
The deploy address can govern the contract bypassing timelock-controller limitations. test scenario
Recommendation
Remove Proposer and Executor roles from the deployer address after deploy.