EmberGuard

QuillAudits17 Mar 2025Files named in the report

Audit · firm’s term: audit report

QuillAudits reviewed EmberGuard on 17 Mar 2025: 3 findings, 0 critical; 2 marked fixed, 1 open.

No open critical findings

Open the report Open EmberGuard’s security record

Report hosted on quillaudits.com.

Trustblock does not review code.

Findings3

Statuses are the security firm’s own, from its report.

Severity	Open	Fixed
Critical	0	0
High	0	0
Medium	1	0
Low	0	2

LowContract ownership can transferred to the wrong ownerFixed

Access control is a critical part of smart contract security. Within this contract, access control is handled by the Ownable library which allows the owner to relinquish their rights to a new owner in one function call, transferOwnership(). This is risky if the new owner address passed in is malicious or is a victim of an address poisoning attack where some bytes of the address are changed when copied to the clipboard.

LowOwnership Renouncement Can Break Critical FunctionsFixed

The Ownable contract includes a renounceOwnership() function that allows the contract owner to relinquish ownership. If this function is called on the FireFund contract, it will leave the contract without an owner, potentially disrupting critical functions that rely on the onlyOwner modifier.