The client asked me to run their repo. I read it instead.
A developer refused to run a client's repository and instead read the code, uncovering critical vulnerabilities and discrepancies. The staking contract transferred deposits to the zero address, the re…