Summary

IMPACT : HIGH
Likelihood : Medium

The appointTrustee() function allows any single beneficiary to appoint a new trustee without requiring consensus from the other beneficiaries. Since the trustee has the ability to change the price of the NFT, this creates a centralization risk where one beneficiary can manipulate asset valuation without approval from others.

This breaks the intended inheritance logic, as the trustee's role should be subject to majority consensus among beneficiaries. In a real-world inheritance scenario, this could lead to disputes, unfair pricing adjustments, or favoritism.

Impact

A single malicious beneficiary can appoint a trustee who manipulates NFT valuations, potentially devaluing or inflating the price of an estate asset, without the consent of the other beneficiaries.

recommendation

use a mechanism where for example half of the beneficiaries have to agree on a new trustee