Critical
CVSS 9.1 Access Control Code4rena
Disclosure
Ownership Slot Mismatch Bricks Smart Wallet After Claim Transition
Wallet stores owner in both custom and OZ Ownable slots, and owner() switches source based on isClaimed, leaving the wallet ownerless after the two-step claim.
- Target
- Ethereum Attestation Protocol
- Category
- Access Control
- Channel
- Code4rena
- Disclosed
- 2026-03
Redaction note
Vendor identity withheld.
This finding is documented here as part of MemCyber’s public disclosure record. The vendor has been anonymized to a sector and region descriptor. Full technical detail — including root cause, reproducible proof-of-concept, remediation guidance, and vendor attribution where granted — is available to qualified prospects under NDA.
Coordinated disclosure
How we handled it.
- Reported to the vendor via Code4rena with a reproducible proof-of-concept.
- Triage + remediation window coordinated with the vendor security team.
- Fix verified before any public reference.
- This record published only after the embargo period closed.