PDA Seed Collision: How a Sequential Counter Affected Account Isolation on Solana

During a review of the TokenTable Solana Unlocker V2 program, we observed a scenario in which token allocations associated with cancelled accounts could be accessed in an unintended sequence, without requiring privileged permissions.