Financial loss via unchecked recipient-balance addition

Integer overflow in Lancer Token allows remote authenticated users to reduce account balances through a crafted token transfer. The transfer function adds the supplied value to balances[_to] without checking whether the uint256 sum exceeds 2^256, so the recipient balance wraps to a smaller number. Exploitation requires contract-owner access and two sufficiently large balances; the resulting balance corruption causes direct financial loss.