The transfer instruction was previously missing a check that asserts the mint matches the mint that is in the metadata account.

This change moves critical assertion logic higher in the flow to apply to all transfer types.

This issue was found by SolShield and reported to Metaplex Security Response Squad.
As a part of our due diligence, our contracts are regularly and iteratively audited.