Summary

Vulnerability Details

Having a single EOA as the only owner of contracts is a large centralization risk and a single point of failure. A single private key may be taken in a hack, or the sole holder of the key may become unable to retrieve the key when necessary.
There are 2 instances of this issue:

• function burn(uint256 _amount) public override onlyOwner

• function mint(address _to, uint256 _amount) external onlyOwner returns (bool)

Impact

Tools Used

Recommendations

Consider changing to a multi-signature setup, or having a role-based authorization model.