Red flag

Findings

• The owner can change the rules with setBaseURI().
• The owner can change the rules with setMintOpen().
• The owner can change the rules with setSealedURI().
• The owner can change the rules with setSeed().
• The owner can change the rules with setSeedHash().
• A hard-coded address can move funds through withdraw(), even after the owner renounces.

Privileged functions

Functions in the verified source that only some addresses may call.

setBaseURI() setMintOpen() setSealedURI() setSeed() setSeedHash() withdraw()

What to do

Do not send funds until you have read the source yourself. If there is no verified source, nobody can tell what this contract does.