An empty marker lets anyone become admin on Provenance chain
Trail of Bits found a Cosmos SDK flaw letting any user take admin control over Provenance marker accounts with zero tokens. The authorization check meant to gate access to 100%-of-supply holders short-circuits as true for any zero-balance caller on non-fixed markers. Two transactions suffice to mint tokens or drain escrow. Fixed in v1.28.0, but 82 live markers on mainnet were exposed.