saviswap

Some functions in the contract `MultiSig` can be called by anyone, for example `setPerformBySigs()`, which allows anyone to call it and update `perform` as long as someone has a sufficient number of signatures.

Line 239 of the code only checks if two adjacent addresses in the array are different, if the variable `sigsMin` is greater than 2, the array will pass the check as long as there are two different addresses in the array.

The function `setSwap()` is `external` and can be called by anyone as long as the contract is deployed.

If the `swap()` function modified by `whenNotPaused` has been suspended, the user can still swap the tokens by calling the function `perform()` of `performer`.

The variable `feeRate` does not have reasonable boundaries, so they can be given arbitrary values after deploying.

The given input is missing the check for the non-zero address.

There should always be events emitted in the sensitive functions that are controlled by centralization roles.

A reentrancy attack can occur when the contract creates a function that makes an external call to another untrusted contract before resolving any effects. If the attacker can control the untrusted contract, they can make a recursive call back to the original function, repeating interactions that would have otherwise not run after the external call resolved the effects.