Link to instance
The function does not validate _tokenData.decimals for the _tokenContract against the ERC20 decimals() function of the token. This validation should be put in place to not only avoid human errors but also to avoid manipulation of schnibbles calculation (see second point in Admin powers section for specific scenario on this).
