Closed code423n4 closed 2 years ago
In tailOff a strategist can choose any _stratUtil target. A malicious target can drain the tokens. Consider having a whitelist, at least temporary, and you can later disable it if everything goes smoothly.
dup of #211
Judge has assessed an item in Issue #439 as Medium risk. The relevant finding follows: