Beincom - Audit 2

In the contract `BicRedeemFactory`, the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and create a redeem token and schedule for any arbitrary address. 

The `BicFactory` contract uses `CREATE2` for deploying contracts, which can lead to a vulnerability where an initially harmless contract can be replaced with a malicious one at the same address using the `selfdestruct` function followed by re-deployment. This metamorphic behavior could deceive users into interacting with a malicious contract, thinking it is still the original, benign contract. By utilizing non-deterministic initialization code, contracts can suddenly mutate in-place and swap in arbitrary bytecode. As one example of non-determinism, the initialization code could call in to some external contract with mutable storage and use the returned data to construct the final bytecode.