Most security bugs in smart contracts end up with a similar impact: you can abuse them to withdraw or destroy tokens that are not yours.