UPDATE, I'm currently working with a guy called SnowKid who is looking over the smart-contract code, so I'll provide updates here if there's anything he finds.