Sparkn

Summary

ProxyFactory's constructor doesn't set its owner to msg.sender, but rather to the zero address.

Vulnerability Details

In order to do so, it must invoke Ownable's constructor with msg.sender as argument, but it invokes it without any arguments (so the argument is set to zero by default).

Impact

The ProxyFactory contract has no owner, and all the owner-functions could never be invoked.

Recommendations

Invoke Ownable's constructor with msg.sender as argument.