Summary

In functions constructor and transferOwnership missing zero address check. If by mistake admin call transferOwnership with zero address protocol will be continue without owner and this can cause errors.

Vulnerability Details

missing zero check for _owner address

Impact

Can transfer ownership to zero address

Tools Used

Manual Review

Recommendations

in both function add
require(_owner != address(0));