[Audit V2] F-07 — Missing `rescueToken()`

[cozcan]

• Severity: ℹ️ Informational — Priority: P3
• Category: Operational robustness
• Source: @crypto4all audit

Description

No function allows recovery of ERC20 tokens accidentally sent to the contract. This is not an exploitable vulnerability, but a missing operational convenience.

Recommendation

Add a rescueToken function explicitly excluding asset() and Byzantine shares to prevent any misuse