Submitted by csanuragjain, also found by cccz
Due to missing modifier, User will be able to redeem zcTokens and withdraw underlying even in paused Market. This happens due to missing unpaused(p) modifier
Add unpaused(p) modifier in authRedeem function
JTraversa (Swivel) confirmed 
robrobbins (Swivel) resolved:
