Summary

There are no access control mechanisms in place, allowing any user to call createPool and create pools indiscriminately.

Vulnerability Details

Without access control, any user can create pools, which can lead to unauthorized or malicious pool creation. This could result in the proliferation of pools that are not intended by the contract owner or administrator, potentially causing issues with the contract's integrity and intended functionality.

Impact

• Unauthorized pool creation

• System abuse

• Security risks

Tools Used

Manual Inspection

Recommendations

Implement access control using OpenZeppelin's Ownable or AccessControl to restrict pool creation to authorized addresses only.