StakeHound

`DownstreamCaller` is deployed when `StakedToken` is initialized. However, the contract can be modified by the owner using `setDownstreamCaller`, this does not guarantee that the already listed transactions will be migrated to the new contract.

Depending on `DownstreamCaller.transactions` array length, the gas consumed during a call to `executeTransactions` can be excessively high potentially throwing the transaction for out of gas or block gas limit. Since `executeTransactions` is used by `StakedToken.distributeTokens` function, a bad management of the transactions array can lead to a temporary denial of service for the token distribution logic.

- `transfer` and `transferFrom` can be paused by the owner. - Users can be denied access by the owner to `transfer`, `transferFrom`, `approve`, `increaseAllowance`, `decreaseAllowance` and `mint`, the blacklisting is selective and can be applied to any address. - `mint`function allows the Supply controller can change the supply of token arbitrarily without using `distributeTokens`

The requirement that restricts the `supplyController` from minting more than `_maxSupply` is implicit (`SafeMath` function will throw inside `StakedToken.mint`). However, `distributeTokens` alter `_sharesPerToken` value, therefore cancelling the initial state `_sharesPerToken = MAX_UINT256.div(maxSupply_)`, this will allow the `supplyController` to mint more tokens than `_maxSupply` or in the opposite case (contracted supply) restrict the total supply from reaching `_maxSupply`.