Submitted by cmichel
The Pool.approveAndCall function approves the recipient contract with the max value instead of only the required amount.
For safety, the approval should not be set to the max value, especially if the amount that the contract may use is already known in this call, like this is the case for approveAndCall.
Recommend only approving amount.
