Summary

The latest update of OZ's Ownable.sol now requires the owner to be explicitly set, rather than assuming msg.sender as before.
The current implementation never passes the owner as a parameter when initializing the Ownable contract, this leaves the contract's owner to be left as address(0).
This makes setContest, deployProxyAndDistributeByOwner and distributeByOwner to be completely nonfunctional

Vulnerability Details

The Ownable.sol constructor now requires the owner to be explicitly set rather than always defaulting to msg.sender.

Impact

Key functionalities like setContest, deployProxyAndDistributeByOwner and distributeByOwner will be non functional

Tools Used

Manual Review

Recommendations

Call the Ownable.sol constructor to set the owner or implicitly specify the version to import, if the plan is to make use of an older version, where owner is set to the deployer/msg.sender by default.