A Private Key for BAYC Contract Can Mint an Infinite Number of New OG BAYC

Crypto developer foobar tweeted that the Bored Ape Yacht Club (BAYC) contract has a private key that can mint an infinite number of new OG BAYC at any time. If the token contract owner (a personal wallet, not a multisig) gets hacked or phished, there could be thousands of new bored apes minted and dumped onto the market.
Source