Findings

Owner Capabilities

• The contract contains a minter role, anyone who has a minter role can mint tokens. The version that was reviewed by us gave the deployer the minter role.

Operational Functions

• setAllowed

• setWhitelisted

• setMaxTransferAmount

• setTradingStart

• Access Control - assign addresses to admin role, and minter rule.