Anyone can withdraw USDC interest of another address by calling withdrawFundsOnBehalf(addr).
Imagine a smart contract that has a specific function for withdrawing the USDC contract to their contract:
If the contract has no skim function to transfer out the assets, they can get stuck forever.
USDC interest can get stuck forever.
Disallow withdrawals on behalf of other users.
lucas-manuel (Maple) disputed:
Nick Johnson (Judge):
