On the 26th of August, Nathan James (a.k.a nsjames from Scatter) wrote;

A malicious user can install code on their account which will allow them to insert rows in the name of another account sending them tokens. This lets them lock up RAM by…