Recover Ownership of Contract (thirdweb)

README.md

Recover Ownership of Contract

This is useful when your admin for your contract has been compromised. For example, when you add balance to your admin address and suddenly your admin balance goes to random address. It is painful to remove your admin address if you don't have a gas to spend to assign a new admin address.

Setup

1. Do npx thirdweb create app --node --javascript --evm
2. Rename the .env.example to .env
3. Copy and paste this to your .env

WALLET_PRIVATE_KEY=
THIRDWEB_SECRET_KEY=
RELAYER_URL=

4. After that, fill out the information needed.
5. Get the private key of compromised wallet and paste it as a value to WALLET_PRIVATE_KEY=
6. Get the secret key from this https://thirdweb.com/create-api-key
7. Get the relayer_url from this tutorial https://blog.thirdweb.com/guides/setup-gasless-transactions
8. Copy and paste the index.js to your local index.js
9. Complete the info in the variables.

const newAdmin = "0x...";
const contractAddress = "0x...";

9. Run the code by doing node index.js

Usage

1. After the setup, run the script straight. node index.js
2. Comment this part by adding // in front of it.

const tx = await contract.roles.grant("admin", newAdmin);

3. Then, uncomment this part. By removing the // in front of it.

const tx = await contract.owner.set(newAdmin);

4. Run again the script. node index.js

index.js

import { config } from "dotenv";
import { ThirdwebSDK } from "@thirdweb-dev/sdk";

config();

const newAdmin = "0x...";
const contractAddress = "0x...";

const main = async () => {
  if (!process.env.WALLET_PRIVATE_KEY) {
    throw new Error("No private key found!");
  }

  try {
    const sdk = ThirdwebSDK.fromPrivateKey(process.env.WALLET_PRIVATE_KEY, 'polygon', {
      gasless: {
        openzeppelin: {
          relayerUrl: process.env.RELAYER_URL, // Learn more: https://blog.thirdweb.com/guides/setup-gasless-transactions/
        },
      },
      secretKey: process.env.THIRDWEB_SECRET_KEY,
    });

    const contract = await sdk.getContract(contractAddress);
    // run this first so you can set it as owner.
    const tx = await contract.roles.grant("admin", newAdmin);
    // Uncomment this, and comment the code above ^ after you set the newAdmin as admin.
    // const tx = await contract.owner.set(newAdmin);

    console.log(tx);

  } catch(error) {
    console.error("Something went wrong: ", error);
  }
};

main();