Summary

The owner role has a single point of failure and onlyOwner can use critical functions, posing a centralization issue.

Vulnerability Details

Having a single EOA as the only owner of contracts is a large centralization risk and a single point of failure. A single private key may be taken in a hack, or the sole holder of the key may become unable to retrieve the key when necessary.

Code Snippet

Impact

There is always a chance for owner keys to be stolen, and in such a case, the attacker can cause damage to the project due to important functions.

Tools Used

Manual Code Review

Recommendations

Consider changing to a multi-signature setup, or having a role-based authorization model.