Excessive centralization Medium

Summary

Some roles have too much power.

Vulnerability Detail

BLACKLISTER_ROLE can blacklist any user at will and take their tokens. (https://github.com/sherlock-audit/2024-02-telcoin-platform-audit-update/blob/21920190e0772afa18e7f856a036fea3ef5b9635/telcoin-contracts/contracts/util/abstract/Blacklist.sol#L72)
SUPPORT_ROLE can choose a new Proxy implementation (https://github.com/sherlock-audit/2024-02-telcoin-platform-audit-update/blob/21920190e0772afa18e7f856a036fea3ef5b9635/telcoin-contracts/contracts/factories/ProxyFactory.sol#L85C59-L85C71).
MINTER_ROLE can indefinitely mint tokens, which can lead to their devaluation (https://github.com/sherlock-audit/2024-02-telcoin-platform-audit-update/blob/21920190e0772afa18e7f856a036fea3ef5b9635/telcoin-contracts/contracts/stablecoin/Stablecoin.sol#L74C50-L74C61).
BURNER_ROLE can burn other people's tokens (https://github.com/sherlock-audit/2024-02-telcoin-platform-audit-update/blob/21920190e0772afa18e7f856a036fea3ef5b9635/telcoin-contracts/contracts/stablecoin/Stablecoin.sol#L106).
SUPPORT_ROLE can withdraw money from a contract (https://github.com/sherlock-audit/2024-02-telcoin-platform-audit-update/blob/21920190e0772afa18e7f856a036fea3ef5b9635/telcoin-contracts/contracts/swap/AmirX.sol#L234)

Impact

Medium. Such centralization can lead to loss of confidence in the project. also, in case of a key leak of one of the previously mentioned roles will lead to loss of money from the whole project.

Code Snippet

https://github.com/sherlock-audit/2024-02-telcoin-platform-audit-update/blob/21920190e0772afa18e7f856a036fea3ef5b9635/telcoin-contracts/contracts/util/abstract/Blacklist.sol#L72 https://github.com/sherlock-audit/2024-02-telcoin-platform-audit-update/blob/21920190e0772afa18e7f856a036fea3ef5b9635/telcoin-contracts/contracts/factories/ProxyFactory.sol#L85C59-L85C71 https://github.com/sherlock-audit/2024-02-telcoin-platform-audit-update/blob/21920190e0772afa18e7f856a036fea3ef5b9635/telcoin-contracts/contracts/stablecoin/Stablecoin.sol#L74C50-L74C61 https://github.com/sherlock-audit/2024-02-telcoin-platform-audit-update/blob/21920190e0772afa18e7f856a036fea3ef5b9635/telcoin-contracts/contracts/stablecoin/Stablecoin.sol#L106 https://github.com/sherlock-audit/2024-02-telcoin-platform-audit-update/blob/21920190e0772afa18e7f856a036fea3ef5b9635/telcoin-contracts/contracts/swap/AmirX.sol#L234

Tool used

Noen

Manual Review

Recommendation

Refuse such centralization. Switch to a government system and do not take money from users for nothing.

sherlock-audit / 2024-02-telcoin-platform-audit-update-judging

DiGarOn - Excessive centralization Medium #32