[ryanlol]

This is not a wallet vulnerability.

This was a vulnerability in an ethereum smart contract, it is code running on the ethereum network.

[nrb]

It's both. It's a bug in a library that wallet contracts import. Everything is working perfectly as intended on the Ethereum/Solidity end.