CyberConnect - cybergraph

In the contract `LaunchTokenPool` the role `owner` has authority over the functions shown in the diagram below.

![](https://accelerator-tasks-prod.acc.corp.certik.com/11ee-d5ec-0941a800-b79c-11e04cb30ebf/diagrams/centralization_LaunchTokenPool-LaunchTokenPool-owner.svg)


- `withdraw(address to, uint256 amount)`: Allows the owner to withdraw CYBER tokens from the contract. Accessible only by the owner.
- `withdrawERC20(address currency, address to, uint256 amount)`: Allows the owner to withdraw any ERC20 tokens from the contract. Accessible only by the owner.
- `pause()`: Allows the owner to pause the contract, which prevents deposits. Accessible only by the owner.
- `unpause()`: Allows the owner to unpause the contract, which enables deposits. Accessible only by the owner.


Any compromise to the `owner` account may allow the hacker to take advantage of this authority and update the sensitive settings and execute sensitive functionalities of the protocol.

The project design may not be compatible with non-standard ERC20 tokens, such as deflationary tokens or rebase tokens.