Good catch! It is indeed that the constructor could be called by anyone. Here's a couple txns showing it: Calling initwallet: https://etherscan.io/tx/0xff261a4

Good catch! It is indeed that the constructor could be called by anyone. Here's a couple txns showing it: Calling initwallet: https://etherscan.io/tx/0xff261a49c61861884d0509dac46ed67577a7d48cb73c2f51f149c0bf96b29660 https://etherscan.io/tx/0xff261a49c61861884d0509dac46ed67577... Executing: https://etherscan.io/tx/0x0e0d16475d2ac6a4802437a35a21776e5c9b681a77fef1693b0badbb6afdb083 https://etherscan.io/tx/0x0e0d16475d2ac6a4802437a35a21776e5c...