Red flag

Findings

• The owner can change the rules with pause().
• The owner can change the rules with setContractURI().
• The owner can change the rules with setGating().
• The owner can change the rules with setHiddenURI().
• The owner can change the rules with setMintPrice().
• The owner can change the rules with setRoyalty().
• The owner can change the rules with unpause().
• A hard-coded address can move funds through withdraw(), even after the owner renounces.
• A hard-coded address can move funds through withdrawToken(), even after the owner renounces.

Privileged functions

Functions in the verified source that only some addresses may call.

freezeMetadata() pause() reveal() setContractURI() setGating() setHiddenURI() setMintPrice() setRoyalty() unpause() withdraw() withdrawToken()

What to do

Do not send funds until you have read the source yourself. If there is no verified source, nobody can tell what this contract does.