Description

The Canto_childUSDz contract has the variable needed to implement the two-step ownership transfer:

// Make owner transfer 2 step.
address private _pendingOwner;

However, this variable is unused in this contract, and the functions in the inherited Ownable contract are not overridden.

Impact

This finding documents that the two-step ownership-transfer mechanism is unimplemented in this contract, unlike other contracts, which properly implemented this.

Recommendations

Consider implementing the remaining part of two-step ownership-transfer mechanism.

Remediation

This issue has been acknowledged by Anzen Group Ltd., who notified us that they plan to deploy the childUSDz contract on Canto with the additional line of code that registers the contract for CSR, instead of the Canto_childUSDz contract.