Owner controls

Findings

• The owner can change the rules with addAdmin().
• The owner can change the rules with addEditor().
• The owner can change the rules with addMiles().
• The owner can change the rules with addMilesOperator().
• The owner can change the rules with removeAdmin().
• The owner can change the rules with removeEditor().
• The owner can change the rules with removeMilesOperator().
• The owner can change the rules with setBaseURI().
• The owner can change the rules with setContractURI().
• The owner can change the rules with setCustomNumber().
• The owner can change the rules with setCustomText().
• The owner can change the rules with setIndividualURI().
• The owner can change the rules with setInitialMiles().
• The owner can change the rules with setMiles().
• The owner can change the rules with setMintPrice().
• The owner can change the rules with setStaticFilename().
• The owner can change the rules with setTierThresholds().
• The owner can change the rules with toggleMinting().
• The owner can withdraw funds with withdrawETH().

Privileged functions

Functions in the verified source that only some addresses may call.

addAdmin() addEditor() addMiles() addMilesOperator() adminMint() banUser() deductMiles() recoverERC20() removeAdmin() removeEditor() removeMilesOperator() setBaseURI() setContractURI() setCustomNumber() setCustomText() setIndividualURI() setInitialMiles() setMiles() setMintPrice() setStaticFilename() setTierThresholds() toggleMinting() unbanUser() withdrawETH()

What to do

Read the listed functions before you send anything. An active owner can change the rules after you mint.