According to BlockBeats, on October 22, Bryan Pellegrino, CEO of cross-chain interoperability protocol LayerZero, wrote to the Across Protocol team on social media, pointing out key problems with its token contract.
Pellegrino said Across Protocol mistakenly exposed a function that should have been an internal private function, allowing the contract owner to withdraw tokens from any wallet at any time and clear the balance of any account to zero.
In addition, both Across Protocol and UMA Protocol contracts have the ability to mint unlimited coins. Pellegrino has informed the team of these issues, but they donât seem to care.
He suggested transferring the contract ownership to a new smart contract that would prevent minting exceeding the total supply and would not allow destruction. The new contract would have to be immutable and should not include any functionality to transfer ownership.
