This attack was reported in https://github.com/OpenZeppelin/openzeppelin-solidity/issues/877 (cherry picked from commit 80458ebc)
