contracts/governor/src/lib.rs transfer_authority doc: "Deprecated: Use propose_authority + accept_authority instead". It is still fully callable by any Admin, emits no deprecation event, and hands Admin to new_authority in a single call with no proof that address can sign — exactly the risk the 2-step flow was added to remove. Either remove it, or gate it behind an explicit "I understand" parameter and emit a distinct event.
Filed from a codebase review pass.
contracts/governor/src/lib.rstransfer_authoritydoc: "Deprecated: Usepropose_authority+accept_authorityinstead". It is still fully callable by anyAdmin, emits no deprecation event, and handsAdmintonew_authorityin a single call with no proof that address can sign — exactly the risk the 2-step flow was added to remove. Either remove it, or gate it behind an explicit "I understand" parameter and emit a distinct event.Filed from a codebase review pass.