Transfer rewards `_transferReward` calls that are executed inside a loop could potentially lead to a denial-of-service attack