These internal functions can be called by any function within the contract, potentially leading to unauthorized deposits or withdrawals if misused.

Mitigation: Implement access control mechanisms, such as onlyOwner or other appropriate modifiers, to restrict who can call these functions, depending on the intended use case.