Glad I found this thread and I want to contribute to it.
Due to Uncertainty and Doubt, I had been forced to research more and more about WAX and EOS and I stumbled upon this article
EOS may had went through some efforts to mitigate this, but I am not entirely sure if WAX followed them in that direction. Ultimately, even after the "supposed" fixes, I believe the same exploit can be used up to this day.
For the sake of truth, please bring me to reason in case I am writing total nonsense!!
All the best!