Further analysis shows that 0xPauly’s token has a directTransfer function that allows anyone to steal anyone’s tokens