Submitted by hake, also found by catchup, danb, defsec, Jujic, kirk-baird, nedodn, shenwilly, sorrynotsorry, and WatchPug
DiamondCutFacet.sol
WithdrawFacet.sol
DexManagerFacet.sol
contractOwner has complete freedom to change any functionality and withdraw/rug all assets. Even if well intended the project could still be called out resulting in a damaged reputation like in this example.
https://twitter.com/RugDocIO/status/1411732108029181960
Recommend implementing extra safeguards such as:
H3xept (Li.Fi) acknowledged and commented:
gzeon (judge) commented:
