Submitted by cmichel, also found by gpersoon, and pauliax
The Visor.transferERC721 does not reset the approval for the NFT.
An approved delegatee can move the NFT out of the contract once.
It could be moved to a market and bought by someone else who then deposits it again to the same vault.
The first delegatee can steal the NFT and move it out of the contract a second time.
Recommend resetting the approval on transfer.
xyz-ctrl (Visor) confirmed:
ztcrypto (Visor) commented:
