[lottin]

> he is not in a position where he can steal or move user funds locked into a DeFi contract

He already did that once, and could do it again.