Attack demo

This key used to be able to empty the Safe

... but with Newton Protocol, it can't without a TOTP.

A Guard blocks owner execTransaction, so a raw Safe send cannot drain the pot. The only remaining spend path is the Newton PolicyClient module.

Explore the policy / policy client / guard