WanPlan

In the contract `Staker` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and withdraw all of the staked `lpToken` out of the contract to any address with function `withdrawLP()`.  --- In the contract `WantImplementation` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and set the tax values `lpTax`, `valueInstituteTax` and `burnTax` to any value with function `setTaxConf()`. The tax is taken during token transfers using `transferFrom()`. If the sum of the tax values are greater than 10,000, then the amount of tax taken will be greater than the amount of tokens to be transferred. As a result, this will "mint" new tokens to the `stakeLPAddress` and `valueInstituteAddress`, which can be changed to an address the attacker owns.  --- In the contract `WantSale` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and change the `TradeCoinAddr` and `tc` token addresses to any address with function `setTradeCoinAddr()`. The `TradeCoinAddr` token is used in the contract to be added as liquidity for the liquidity pair. Changing the `TradeCoinAddr` could cause unexpected logical issues while adding liquidity during function `buy()`.