diff --git a/contracts/metatx/ERC2771Forwarder.sol b/contracts/metatx/ERC2771Forwarder.sol index 4d188488874..107878a50a1 100644 --- a/contracts/metatx/ERC2771Forwarder.sol +++ b/contracts/metatx/ERC2771Forwarder.sol @@ -303,9 +303,8 @@ contract ERC2771Forwarder is EIP712, Nonces { * This function performs a static call to the target contract calling the * {ERC2771Context-isTrustedForwarder} function. * - * NOTE: Consider the execution of this forwarder is permissionless. Without - * this check, users may approve token spending to this contract allowing - * any relayer to transfer their tokens. + * NOTE: Consider the execution of this forwarder is permissionless. Without this check, anyone may transfer assets + * that are owned by, or are approved to this forwarder. */ function _isTrustedByTarget(address target) internal view virtual returns (bool) { bytes memory encodedParams = abi.encodeCall(ERC2771Context.isTrustedForwarder, (address(this)));