Openzeppelin Ownable is a well-auditted contract and takes the msg.sender as the owner even without the constructor.
Likelihood: Low
Reason 1 // WHEN an update is made on the Ownable contract by openzeppelin that doesn't take msg.sender, it might crash.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.