The language itself is probably fine but the fact that they are starting from scratch with what appears to be no input from security or financial professionals

The language itself is probably fine but the fact that they are starting from scratch with what appears to be no input from security or financial professionals is a clear sign that there will be security holes