BlockSec: The root cause of the Exactly Protocol attack is #insufficient_check

BlockSec posted on Permission check in DebtManager contract leverage function. Then, in an untrusted external call, the attacker reenters the crossDeleverage function in the DebtManager contract and steals collateral from the _msgSender type.