hotspot review: make sure no reentrancy possible through using combination of external call, ragequit, and withdraw from vault

[Stephane]