In a worst case scenario, when the contract private key has been compromised, the contract pkh associated with a smart contract will have to be changed. When this happens the asset codes no longer look valid as they are supposed to be SHA256(contract pkh + asset index).
Investigate issues and solutions for this.