A high-severity logic flaw in the Rattadan Cosmowarp smart contract allows for unauthorized administrative operations, posing a significant risk to contract integrity.

This vulnerability involves a comparison error using incorrect factors (CWE-1025) within the contract logic. The flaw allows for unintended outcomes during the validation of the current_admin state, which can be triggered by an attacker without requiring prior authentication.

The exploitation of this vulnerability could lead to the unauthorized modification of contract states, potentially resulting in the loss of assets or the manipulation of critical administrative functions. Given the CVSS score of 8.4, the risk to the availability and integrity of the decentralized application is substantial. Organizations relying on this contract may face direct financial loss and a loss of user trust if administrative controls are bypassed.

Immediate Action: Update the smart contract code to commit 56c6147ee613a6aaa157ecefe2f7bf0ad9084fa8 or later, ensuring that unauthorized errors are thrown when the admin state is empty.

Proactive Monitoring: Monitor contract interactions for anomalous administrative calls or unexpected changes to the state of the current_admin variable.

Compensating Controls: Implement multi-signature requirements for administrative actions to prevent a single compromised or unintended admin state from executing unauthorized transactions.

Public Exploit Available: No (exploit_available: unknown)

Due to the high severity and potential for total impact on contract operations, developers must prioritize the implementation of the provided fix. Reviewing the affected code in the contract.rs file is recommended to ensure that all administrative validation logic is correctly updated to prevent bypasses.