Project

Vulnerability Details

while openzeppelin AccessControl.sol provides the ability for minter role to be revoked or renounced, the functions are not exposed or overidden in OWPIdentity.sol.

Impact

A mischevious minter can mint and burn token with the inability of being able to be removed. If the role is overtaken by hackers it cant also be changed by the default admin

Tools Used

manual review

Recommendations

expose the roles that the defaultAdmin should be able to access