NATIX Network security record

In the program `stake_v1`, the role `owner` has authority over the following functions: - `burn_or_transfer`: burn or transfer forfeit tokens - `change_interest_rate`: update interest rate setting. **Note:** the reward rate would combine with the compound period due to the `get_reward` calculation, which should be carefully set by the team. - `init`: init the program account with default setting - `pause`: pause the program from staking, unstake, cancel, withdraw - `resume`: resume from the program pause - `set_config`: overwrite the config setting, which can affect the interest distribution and program functionalities. **Note:** since Since type cast(u64 to f64) may happen amount validation, the config value should be carefully set. Any compromise to these accounts may allow a hacker to take advantage of this authority, manipulate the program functionalities, and cause asset loss. Also, the Solana platform allows for the possibility of upgrading its programs, with the default upgrade authority being the entity responsible for deployment. In situations where the program has upgradability features and the account of the upgrade authority becomes compromised, there is the potential for an unauthorized and malicious update to the program.