High : checking if caller during sale is done incorrectly

[ytrezq]

    // Do not allow contracts to game the system
    require(!isContract(caller));

There’s a well‑known case where a caller has codesize of 0 and is a contract. It should always use a tx.origin comparison instead. Still better to fix it for those who might copy this wrong code.