CreateTransaction (and probably other ZQ-native APIs) don't perform the same validation checks as ZQ1

[rrw-zilliqa]

In particular, CreateTransaction in Zilliqa 1 checks that the toAddress is correctly checksummed either by Zilliqa or EVM rules. ZQ2 doesn't.

There are probably other instances of this through the API; this has the effect that anyone who is relying on eg. bad addresses being rejected by the API will be disappointed and transactions may be submitted successfully that they weren't expecting, leading to tokens getting lost.