Chainport (Sol part)

In the contract `ChainportFeeManager`, the role `Maintainer` has authority over the following functions: - function takePortFee(), to take fees in PORTX. - function withdrawFees(), to withdraw collected fees. Any compromise to the `Maintainer` account may allow a hacker to take advantage of this authority. In the contract `ChainportFeeManager`, the role `ChainportCongress` has authority over the following functions: - function whitelistFeeCollector(), to whitelist fee collectors. - function blacklistFeeCollector(), to blacklist fee collectors. Any compromise to the `ChainportCongress` account may allow a hacker to take advantage of this authority.

In the contract `ChainportMainBridge`, the role `Maintainer` has authority over the following functions: - function freezeBridge(), to freeze the bridge. Users cannot deposit or release tokens in a frozen bridge. - function freezeAssetByMaintainer(), to freeze the asset. The frozen asset cannot be deposited or released. - function activateNetwork(), to establish the network support. Users cannot deposit tokens to an inactive network. - function setPathPauseState(), to disable/enable bridge functionality for an asset. - function releaseFeesByMaintainer(), to release fees to fee collector. - function releaseTokensByMaintainer(), to release funds to whitelisted address. Any compromise to the `Maintainer` account may allow a hacker to take advantage of this authority. In the contract `ChainportMainBridge`, the role `ChainportCongress` has authority over the following functions: - function setBridgeFreezeState(), to freeze/unfreeze a bridge. Users cannot deposit or release tokens in a frozen bridge. - function setAssetFreezeState(), to freeze/unfreeze an asset. The frozen asset cannot be deposited or released. - function setNetworkActivityState(), to activate/deactivate a network. Users cannot deposit tokens to an inactive network. - function setFundManager(), to set the fund manager address, which will be added to the whitelist. The whitelisted address receives funds released by `Maintainer` or `ChainportCongress`. - function setAddressesWhitelistState(), to add/remove an address to the whitelist. - function setOfficialNetworkId(), to set official network ID. - function setFeeCollector(), to set the `Chainport` fee collector address. - function releaseFeesByMaintainer(), to release fees to fee collector. - function releaseTokensByMaintainer(), to release funds to whitelisted addresses. Any compromise to the `ChainportCongress` account may allow a hacker to take advantage of this authority.

In the contract `ChainportSideBridge`, the role `Maintainer` has authority over the following functions: - function freezeBridge(), to freeze the bridge. - function mintNewToken(), to deploy a new bridge token for an original asset on deployment network. - function mintTokens(), to mint any amount of bridge tokens. - function mintFees(), to mint fees of tokens created by the bridge to fee collector. - function activateNetwork(), to activate support for network with selected `Chainport` ID and enable cross chain transfer. - function freezeAssetsByMaintainer(), to freeze the asset functionalities. - function setPathPauseState(), to disable/enable bridge functionality for an asset. - function pauseBridgeMintableToken(), to pause the bridge token. - function blockAddressOnBridgeMintableToken(), to block an address for the bridge token. - function initializeTokenProxyAdminAndLogic(), to set the bridge token implementation contract and its proxy admin, which will be used to deploy the new bridge token. Any compromise to the `Maintainer` account may allow a hacker to take advantage of this authority. In the contract `ChainportSideBridge`, the role `ChainportCongress` has authority over the following functions: - function setBridgeFreezeState(), to freeze/unfreeze the bridge. - function setNetworkActivityState(), to enable/disable cross-network interactions with selected `Chainport` ID. - function setAssetFreezeState(), to freeze/unfreeze assets. - function setSignatureValidator(), to set signature validator. - function setOfficialNetworkId(), to set official network ID. - function setLiquidityPools(), to liquidity pool addresses for bridge tokens. - function setMaxLpDrainagePercent(), to set maximum percent to drain when minting. - function setMintingProtectionTime(), to set time limit for minting large token amounts. - function setMintingFreezeState(), to freeze/unfreeze minting action. - function setThresholdPerToken(), to set thresholds for bridge tokens. The side bridge will free minting tokens if the signature is not in the whitelist and the total minted token amount during protection time exceeds the threshold. - function whitelistSignature(), to whitelist a signature. Minting bridge tokens with a whitelisted signature will not check the minting threshold restriction. - function mintingAndAssetUnfreeze(), to unfreeze minting action and single token. - function setTokenProxyAdmin(), to set the proxy admin of new bridge token. - function setTokenLogic(), to set new bridge token implementation contract address. - function setFeeCollector(), to set `Chainport` fee collector address. Any compromise to the `Maintainer` account may allow a hacker to take advantage of this authority.

In the contract `BridgeMintableTokenV2Taxable` the role `chainportBridge` has authority over the functions shown in the diagram below. Any compromise to the `chainportBridge` account may allow the hacker to take advantage of this authority. - `mint()`, to mint unlimited tokens. - `pause()`, to pause token transfer. - `blockAddress()`, to block address.  In the contract `BridgeMintableTokenV2Taxable` the role `chainportCongress` has authority over the functions shown in the diagram below. Any compromise to the `chainportCongress` account may allow the hacker to take advantage of this authority and set properties and roles. - `mint()`, to mint unlimited tokens. - `pause()`/`unpause`, to pause/unpause token transfer. - `blockAddress()`/`unblockAddress()`, to block/unblock address. - `destroyBlackFunds()`, to burn tokens of an address.  In the contract `BridgeMintableTokenV2Taxable` the role `taxationGoverningBody` has authority over the functions shown in the diagram below. Any compromise to the `taxationGoverningBody` account may allow the hacker to take advantage of this authority and set tax properties. 

`ChainportMainBridge`, `ChainportFeeManager`, `ChainportSideBridge` and `BridgeMintableTokenV2Taxable` are upgradeable contracts, the owner can upgrade the contract without the community's commitment. If an attacker compromises the account, he can change the implementation of the contract and drain tokens from the contract.