Upgraded Q -> M from 119 [1654475092615]

[code423n4]

Judge has assessed an item in Issue #119 as Medium risk. The relevant finding follows:

Checking whether the receiver is capable of holding ERC721
The contract usessafeTransfer() for ERC20 but uses transferFrom() for ERC721 in both exercise() and withdraw() which may lead to the loss of ERC721 if the receiving contract does not have onERC721Received(). To prevent this unintended circumstance, the contract should replace this function with safeTransferFrom() for ERC721 to check whether the receiving contract is IERC721Receiver.

[HardlyDifficult]

Dupe of #38