A security vulnerability has been identified in IPOR's Fusion project, according to blockchain security firm SlowMist. The flaw stems from a weakness in the base contract controlled by an EOA account through EIP-7702, which permits arbitrary external calls. This vulnerability enables attackers to create and configure malicious circuit breaker contracts within the Plasma Vault, allowing them to extract funds from the contract.