Missing upgrade test suite
The test suite is well-written and covers most of the edge cases. However, the upgradability of the Token contract is not covered by tests. We recommend building a rigorous test suite for this feature as well to ensure that the system operates securely and as intended.