@dotandat from the Oasis Core team pointed out that a milicious contract could call the results transaction and revert/retry it if it didn't go their way. I hadn't even considered other contracts using it, let alone the various gotchas related to that. I just patched it and updated the repo now! Thanks @dotanddat!
Log in or sign up for Devpost to join the conversation.