Submitted by Ruhum
The strategist is able to use user funds to trade on the RubiconMarket. They can abuse this to transfer user funds to themselves.
A strategist having access to user funds seems to be a deliberate design choice. But, I believe its important to note how dangerous that is.
Theres no easy way to fix this since its a big part of the protocol. Youd have to overhaul the whole thing.
You could minimize the dmg by limiting the amount of funds a strategist has access to.
bghughes (Rubicon) acknowledged and marked as duplicate:
HickupHH3 (judge) commented:
