From my understanding there is no way to change the owner which can lead to funds can be stuck if an AMM and governance change/upgrade is required.
There is risk if the owner keys get compromised - also there is no progressive security if you can't change this.
IE it could start as an EOA - and progress to a multisig owner etc.
Lines of code
https://github.com/code-423n4/2023-01-numoen/blob/2ad9a73d793ea23a25a381faadc86ae0c8cb5913/src/periphery/UniswapV3/interfaces/IUniswapV3Factory.sol#L59
Vulnerability details
Impact
From my understanding there is no way to change the owner which can lead to funds can be stuck if an AMM and governance change/upgrade is required. There is risk if the owner keys get compromised - also there is no progressive security if you can't change this. IE it could start as an EOA - and progress to a multisig owner etc.
Tools Used
VS code
Recommended Mitigation Steps
Use Ownable.sol by OpenZeppelin