Summary

• Add POC proving Orchestrator.withdrawTokens can be called by anyone to drain accumulated
  payment tokens (finding 01)
• Add POC proving MultiSigSigner.initConfig can be hijacked by a session key to take over a
  super-admin multisig key (finding 02)
• Full writeup in test/poc-findings/findings.md

Details

test_orchestratorPaymentsSweep: Two legitimate intents execute with paymentRecipient = address(oc). 0.6 ether of ERC20 accumulates on the Orchestrator. An unprivileged attacker
sweeps everything via withdrawTokens.

test_initConfigNoAuthCheck: A session key (non-super-admin) with initConfig permission
hijacks the multisig config for a super-admin External key through the Orchestrator. Config
is permanently locked. Attacker produces valid signatures for the hijacked key.

Test plan

`test/poc-findings/TestFindings.t.sol`

• forge test --match-test test_orchestratorPaymentsSweep -vvv
• forge test --match-test test_initConfigNoAuthCheck -vvv
• forge test (full suite still passes)