Assessment reports>TruFin Injective Staker>Threat Model>Message: ExecuteMsg::ClaimOwnership

Message: ExecuteMsg::ClaimOwnership

This allows the pending owner to claim ownership of the contract, transferring privileges from the current owner.

Inputs

  • info.sender

    • Validation: The claim_ownership function ensures that the info.sender matches the pending owner set in the contract state.

    • Impact: The sender becomes the new owner upon successful execution.

Branches and code coverage (including function calls)

Intended branches

  • If the info.sender matches the pending owner, ownership is transferred and the pending owner is cleared.

Negative behavior

  • Fail if no pending owner is set.

  • Fail if the info.sender does not match the pending owner.

Zellic © 2025Back to top ↑