Currently we still use `send` and `transfer` to trigger the refund payment. These should be replace by `call`. TODO: Evaluate possible reentrancy vectors