As I mentioned in my mitigation comment about H-02 I believe the issue to be completely resolved after there are checks for not calling the addresses of the baseToken and the nft. As I mentioned in H-02 something that can be done to allow for additional flexibility for the private pool owners is to have checks with function selectors you do not allow to be called on the above addresses. This will still completely mitigate the issue whilst giving more freedom to the private pool owners.
As I mentioned in my mitigation comment about H-02 I believe the issue to be completely resolved after there are checks for not calling the addresses of the
baseToken
and thenft
. As I mentioned in H-02 something that can be done to allow for additional flexibility for the private pool owners is to have checks with function selectors you do not allow to be called on the above addresses. This will still completely mitigate the issue whilst giving more freedom to the private pool owners.