VITE Labs

In the contract `Ownable` the role `_owner` has authority over the functions. - renounceOwnership(), Leaves the contract without an owner. - transferOwnership(), Transfers contract ownership to a new account. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and manage the privileged role. In the contract `VITEDAO` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and do the following things. - pause/unpause the contract. - mint tokens to any account at will. 

In the contract `VITEDAO`, the role owner has the authority to update the token balance of an arbitrary account without sanity restriction. Any compromise to the `owner` account may allow a hacker to take advantage of this authority and manipulate users' balances. For example, the hacker could also update his/her balance to a large number, sell these tokens, and cause the token price to drop.

All of the `VDAO` tokens are sent to the `initialOwner` address. This is a centralization risk because the `initialOwner` can distribute tokens without obtaining the consensus of the community. Any compromise to the addresse may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.