Rating:

Writeup by @dnapex.

Original writeup (https://dystopia.sg/hitb-gsec-2017-simple-transfer-misc/).