Apple(AMB)-Binemon NFT

In the contract `Apple` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and modify contract configurations.  In the contract `Ownable` the role `_owner` has authority over the functions shown in the diagram below. Any compromise to the `_owner` account may allow the hacker to take advantage of this authority and modify contract configurations. 

All of the **AMB** tokens are sent to the contract deployer when deploying the contract. This could be a centralization risk as the deployer can distribute tokens without obtaining the consensus of the community.

An owner is possible to gain ownership of the contract even if he calls function `renounceOwnership()` to renounce the ownership. This can be achieved by performing the following operations: 1. Call `timelock()` to lock the contract. The variable `_previousOwner` is set to the current owner. 2. Call `untimelock()` to unlock the contract. 3. Call `renounceOwnership()` to leave the contract without an owner. 4. Call `untimelock()` to regain ownership.

The function below has a known bug. ```solidity function includeInReward(address account) external onlyOwner() { require(_isExcluded[account], "Account is already excluded"); for (uint256 i = 0; i < _excluded.length; i++) { if (_excluded[i] == account) { _excluded[i] = _excluded[_excluded.length - 1]; _tOwned[account] = 0; _isExcluded[account] = false; _excluded.pop(); break; } } } ``` Variable `_rOwned[account]` is not updated in the function `includeInReward()`, which will make the accounts included siphon off the tokens out of the balances of all token holders.