Yup! They'd receive the "gas" or they could have written a script to drain the entire wallet.