Industry Sonic - Audit

All of the tokens are sent to the contract deployer . This is a centralization risk because the deployer can distribute tokens without obtaining the consensus of the community. Any compromise to the deployer address may allow a hacker to steal and sell tokens on the market, resulting in severe damage to the project.

The contract is serving as the underlying entity to interact with one or more third party protocols. The scope of the audit treats third party entities as black boxes and assumes their functional correctness. However, in the real world, third parties can be compromised and this may lead to lost or stolen assets. In addition, upgrades of third parties can possibly create severe impacts, such as increasing fees of third parties, migrating to new LP pools, etc. ```solidity=776 constructor(address payable receiver, string memory serviceName, bytes memory signature, address wallet) payable { ``` - The function `ServicePayer.constructor` interacts with third party contract with `IPayable` interface via `receiver`.