A single owner/EOA can unilaterally upgrade, pause, mint, set fees, or move funds with no timelock or multisig, creating a single point of failure and rug risk.
// Multisig owner -> TimelockController -> protocol; caps + events on every power
Largest recorded losses in the same failure class — related, not the same bug:
The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0082 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.