Assessment reports>TruFin Injective Staker>Threat Model>Message: ExecuteMsg::SetPendingOwner

Message: ExecuteMsg::SetPendingOwner

This allows the current owner to set a pending owner. The pending owner has no privileges until explicitly accepted.

Inputs

  • info.sender

    • Validation: The set_pending_owner function verifies that the info.sender is the current owner.

    • Impact: N/A.

  • new_owner

    • Validation: The provided new_owner address is validated to ensure it is in a proper address format.

    • Impact: The value that new_owner is set to.

Branches and code coverage (including function calls)

Intended branches

  • If new_owner is valid, it is saved as the pending owner in the state.

Negative behavior

  • Fail if new_owner is not a valid address.

Zellic © 2025Back to top ↑