Submitted by cmichel
FETH.sol#L433
The FETH.withdrawFrom function does not validate its to parameter.
Funds can be lost if to is the zero address.
Check that to != 0.
NickCuso (Foundation) confirmed and commented:
