First Flight #10: One Shot

Description:

• Contracts have owners with privileged rights to perform admin tasks and need to be trusted to not perform malicious updates or drain funds.

Impact:

• Contract owner can change the Streets.sol address to an arbitrary address and cut the mint of the Cred for staked Rappers,

Proof of Concept:

• Access CredToken.sol::setStreetsContract;

• Input an arbitrary address or even the address(0);

• Done.