My main focus in the SyncSwap audit was the access control section. The owner permissions were worth checking.