Summary

Owner can renounceOwnership

Vulnerability Details

ProxyFactory.sol relies on critical and key onlyOwner functions which require an owner at all times. Ownable.sol has a renounceOwner(...) function that can be called maliciously or accidentally by owner leaving the main contract without an owner

Impact

ProxyFactory is the main entry contract for the projects. Without the owner functionality the project can not function to set, deploy, create, pay, and other functionalities of proxies, implementation, distribution, contests, etc

Tools Used

Manual Analysis

Recommendations

It is recommended to overwrite renounceOwnership(..) function in the contracts to ensure that it cant be called e.g to revert etc