include `sender` and `recipient` in deposit

[smol-ninja]

As per Cantina finding 7, deposits are susceptible of reorg attacks. Thus, include sender and recipient in deposit's input parameters. This would avoid stealing funds from depositors during chain re-orgs.

[andreivladbrg]

update on this: token should also be included

should we have a bytes param instead of 3 separate params? which would decoded into:

(address sender, address recipient, address token) = abi.decode(data, (address, address, address));

[smol-ninja]

umm I think you may have missed this conversation on Slack.

[andreivladbrg]

yes, i have