DeFi detective alleges this ‘suspicious’ smart contract code may put dozens of projects at risk“TLDR: they can pull $$ even if the owner is the null address,” writes Zachxbt.