DSC mint/set_minter are owner-controlled with no engine binding, so a compromised owner can mint unlimited unbacked DSC

Description

The DSC token exports mint and set_minter guarded only by snekmate's ownable/erc20 minter role, and the engine is never hard-wired as the sole minter at construction.

Ownership and minter rights are off-chain operational settings; nothing in the contract guarantees the DSCEngine is the only address that can mint, so the stablecoin's backing depends entirely on the deployer correctly transferring ownership/minter to the engine and never re-granting it.

Risk

Likelihood:
Low. Requires owner key misuse or a deployment that forgets to renounce/transfer minter control to the engine exclusively.

Impact:
Medium. A minter other than the engine can mint DSC with no collateral backing, instantly depegging the stablecoin and stealing value from every holder. This is a centralization / trust-assumption risk inherent to the privileged minter design.

Proof of Concept

After deployment, the owner grants itself minter and mints unbacked DSC.

Recommended Mitigation

Bind the engine as the immutable sole minter and renounce owner mint rights at deployment, or at minimum document and gate set_minter.