LandX Finance

Some functions do not validate their input addresses to be non-zero, which can result in unexpected behavior by the contracts. A non-exhaustive list includes: * `cToken.constructor()` * `cToken.setRentFoundation()` * `cToken.setXTokenRouter()` * `KeyProtocolVariables.constructor()` * `KeyProtocolVariables.updateHedgeFundWallet()` * `KeyProtocolVariables.updateLandxOperationalWallet()` * `KeyProtocolVariables.updateLandxChoiceWallet()` * `KeyProtocolVariables.updateXTokensSecurityWallet()` * `KeyProtocolVariables.updateValidatorCommisionWallet()` * `LNDX.constructor()` * `LNDXGovernor.constructor()` * `nft.constructor()` * `nft.setXTokenRouter()` * `OracleMulti.updateOraclePrices()` * `OraclePrices.constructor()` * `RentFoundation.constructor()` * `RentFoundation.setXTokenRouter()` * `RentFoundation.setGrainPrices()` * `RentFoundation.changeLandXNFTAddress()` * `xBasket.constructor()` * `xToken.constructor()` * `xToken.changeLandXNFTAddress()` * `xToken.changeXBasketAddress()` * `xToken.setRentFoundation()` * `xToken.setOraclePrices()` * `xToken.setXTokenRouter()` * `xTokenRouter.setToken()`

The owner of the `xToken` contract has substantial power by being able to modify the addresses of the `LandX`, `xBasket`, `RentFoundation`, and `oraclePrices` contracts being used for the functionality of `xToken`. Substantial trust in the owner is required for this contract to function as intended because the protocol depends on accurate real-world commodity data.