Comment by eternalny1

Fascinating that using a 0 (zero) instead of an O let them backdoor this.

function _setAdmin(address newAdmin) internal { bytes32 slot = ADMIN_SL0T;

    assembly {
      sstore(slot, newAdmin)
    }
  }

https://obelisk.medium.com/meerkat-finance-and-the-0-that-wa...