First Flight #4: Boss Bridge

Summary

There is no way to remove an existing token from the factory except than overwriting it with a newly deployed contract.

Vulnerability Details

If a token needs to be removed due to being compromised (or for any other reasons) from the factory mapping, there is no other way than to deploy a new token and overwrite the former one, resulting in higher gas consumption.

Impact

The factory owner will spend more gas to remove a compromised token from the token mapping.

Tools Used

Manual review.

Recommendations

Add a way to remove the token from the mapping instead of overwriting it.