The contract fails to compile and deploy due to the invalid Ownable constructor argument, preventing ownership from being initialized and causing all onlyOwner functions (like minting, burning, and pausing) to become unusable.

Description

In the constructor of the RaiseBoxFaucet contract, the developer incorrectly attempts to pass msg.sender into the parent Ownable contract’s constructor:

Ownable(msg.sender)

However, according to OpenZeppelin’s standard Ownable implementation for Solidity ^0.8.0, the Ownable constructor does not take any parameters. It automatically assigns the deployer (msg.sender) as the contract’s initial owner during deployment.

Because of this, passing an argument (msg.sender) causes a constructor mismatch error, which leads to compilation failure and prevents the contract from being deployed.

This mistake also breaks the ownership initialization process, meaning onlyOwner functions will not be properly secured or executable until corrected.

In summary, this is a critical logic flaw in inheritance usage that blocks deployment and compromises access contro

l functionality.

Risk

Likelihood :

The vulnerability will occur every time the contract is compiled or deployed, since the incorrect Ownable(msg.sender) call always causes a constructor mismatch and deployment failure.

Impact:

• Access control function broken

• Ownership misconfiguration

Proof of Concept

Recommended Mitigation