Glo Dollar security record

There are several privileged roles within the contracts that control access to significant administrative functions. #### Admin In the contract `USDGLO.sol` the role `DEFAULT_ADMIN_ROLE` has authority over the functions shown in the list below: * grantRole() - grant privileged roles to users Any compromise to the `DEFAULT_ADMIN_ROLE` account may allow the hacker to take advantage of this authority to add or change roles within the platform. #### Denylister In the contract `USDGLO.sol` the role `DENYLISTER_ROLE` has authority over the functions shown in the list below: * denylist() - add user to denylist * undenylist() - remove user from denylist * destroyDenylistedFunds() - burn tokens of user in denylist Any compromise to the `DENYLISTER_ROLE` account may allow the hacker to take advantage of this authority to add or remove a user from a denylist. #### Minter In the contract `USDGLO.sol` the role `MINTER_ROLE` has authority over the functions shown in the list below: * mint() - mint new tokens * burn() - burn tokens Any compromise to the `MINTER_ROLE` account may allow the hacker to take advantage of this authority to mint and burn tokens. #### Pauser In the contract `USDGLO.sol` the role `PAUSER_ROLE` has authority over the functions shown in the list below: * pause() - pause token contract * unpause() - unpause token contract Any compromise to the `PAUSER_ROLE` account may allow the hacker to take advantage of this authority to pause and unpause the token contract. #### Upgrader In the contract `USDGLO.sol` the role `UPGRADER_ROLE` has authority over the functions shown in the list below: * _authorizeUpgrade() - authorize contract upgrades Any compromise to the `UPGRADER_ROLE` account may allow the hacker to take advantage of this authority to upgrade the contract implementation. It is a good practice to separate these different powers into separate roles, however it is important to also ensure that these roles are eventually controlled by different addresses and that controls are set in place to mitigate against centralization risks.

`USDGLO.sol` is an upgradeable contract that implements an enhanced version of `ERC20Upgradeable.sol` and the owner can upgrade the contract without the community's consent. If an attacker compromises the account, he/she can change the implementation of the contract and possibly drain tokens from the contract.