1. Arena Smart Contract Vulnerability: Admin Can Switch Reward Token Mid-Game, Risking User Funds
A critical security flaw has been identified in the Arena smart contract's administrative `set_token` function. The vulnerability allows a contract admin to instantly change the address of the reward or stake token at any time, without regard for the current state of active games. This creates a direct risk where playe...