Bug

The program allows you to control which program is invoked during withdraw. Can you exploit this?