✅ mustn’t use tx.origin

function changeOwner(address _owner) public {
    if (tx.origin != msg.sender) {
      owner = _owner;
    }

• msg.sender > EOA, ContractAddress
• tx.origin > EOA only(In other words, EOA only can start tx)

Ethernaut