Omniscia Tokemak Network Audit

Project Centralization

Project Centralization

The pool system of the project contains an administrative function that permits the owner to approve an arbitrary address via the pool for the maximum amount possible, thereby permitting the arbitrary address to transfer underlying funds out of the pool at will.

This functionality is expected to be desired by the contract system of Tokemak, however, we believe that the address should not be arbitrary and should instead point to some other contract within the Tokemak system to allow "investors" in pools to properly conduct due diligence as to where their funds will go to.