In TokenManager.sol withdraw the capitalPoolAddr is used as the from address when sending the withdrawn tokens. However, there is no check for the address being 0 which can cause transfer calls to revert.
Function call will fail.
Manual review
As in the tillIn() funtion
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.