Summary

If the ownership of the contracts is transferred to the wrong address, many functions can't be called.

Vulnerability Details

If it happens so that the inital owner of the contracts runs the function transferOwnership either by accident or intentionally, if the address to which they transfer the ownership is an uncontrolled externally owned address or a contract that can't even interact with the ownership - all of the functionality designed for the Owner is inaccessible.

Impact

All of the functions with the modifier Ownable may become inaccessible.

Contracts that are using the functionalities from Ownable are:

OneShot.sol, CredToken.sol

Tools Used

Manual Review

Recommendations

Upgrade the Ownable contract to Ownable2Step