Project

Root Cause:

The mint function in the OWPERC20 contract is declared as external without any access control modifiers. This means any address can invoke this function to mint new tokens.

Impact:

• Token Inflation: Malicious actors can mint an unlimited number of tokens, leading to hyperinflation.

• Economic Disruption: The value of the token can be severely devalued, undermining trust in the token's economic model.

• Loss of Funds: Token holders may experience significant losses as the token's purchasing power diminishes.

• Reputation Damage: Such vulnerabilities can erode user trust and damage the project's reputation.

Recommendation:

• Implement Access Control: Restrict the mint function to only authorized roles (e.g., MINTER_ROLE).

  function mint(address account, uint256 amount) external onlyRole(MINTER_ROLE) {

  _mint(account, amount);

  }

• Use Role-Based Access Control (RBAC): Utilize OpenZeppelin’s AccessControl to manage roles securely.