[L-01] - ERC20Burnable
's functions burn AND burnFrom are both public. Allowance holders can straight up burn the approvers tokens in burnFrom. Would recommend disabling access to it by overriding burnFrom.
[L-02] - no storage gap for upgradable contracts (_gap[50]
)
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.