TIME - ERC2771Context + Multicall calldata manipulation

Reference

Arbitrary Address Spoofing Attack: ERC2771Context Multicall Public DisclosureOpenZeppelin

Time Token Exploit - CertiKwww.certik.com

Root cause

Mitigation