Maga VP - audit 1

In the contract `MAGAVPDividendTracker` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `MAGAVP` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority.  In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority. 

In the contract `MAGAVPDividendTracker`, the role `owner` has the authority to update the token balance of an arbitrary account without community consensus. ```sol=904 function _setBalance(address account, uint256 newBalance) internal { uint256 currentBalance = balanceOf(account); if (newBalance > currentBalance) { uint256 mintAmount = newBalance.sub(currentBalance); _mint(account, mintAmount); } else if (newBalance < currentBalance) { uint256 burnAmount = currentBalance.sub(newBalance); _burn(account, burnAmount); } } ``` Any compromise to the `owner` account may allow a hacker to take advantage of this authority and manipulate users' balances. For example, the hacker could also update his/her balance to a large number, sell these tokens, and cause the token price to drop, etc.