incorrect vuln example

[devtooligan]

from Pashov:

Just wanted to point out that the referenced dYdX vuln (https://dydx.exchange/blog/deposit-proxy-post-mortem) is not a "delegatecall to arbitrary address" vulnerability, it's just a low-level call that exploits contract allowances

[engn33r]

I'll investigate this later, all I recall currently is the official writeup mentioned untrusted values