Affyn Land

In the contract `AccessPass` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and perform the following operations: - grant an higher privileges access pass to address he owns or controls. - change the maximum number of access passes available for a certain access type. - close and open access pass sales or change sale's durations. - change the FYN price of access passes. - overwrite the timelock release time.  In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and transfer the ownership to a malicious contract he owns.  In the contract `TokenTimelock` the role `_admin` has authority over the functions shown in the diagram below. Any compromise to the `_admin` account may allow the hacker to take advantage of this authority and change the release time of the contract.  --- In the contract `LandSale` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and perform different operations, for example: change flag burning time and price, mint all the private lands he wants to address he owns or controls, create new city sales, open or close flag and city sales, change the `whitelistedMerkleRoot` etc...  In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and transfer the ownership to a malicious contract he owns.