A defect in `actualizeFee()` rounded redemption collateral upward when no fee was due, drawing on reserves held for other token holders.

This source provides a summary. Read the full report at the original source.

Original source