Skip to content

Latest commit

 

History

History
36 lines (23 loc) · 827 Bytes

arbitrary_call.md

File metadata and controls

36 lines (23 loc) · 827 Bytes
Raw

Arbitrary Call

Configuration

    • Check: pess-arbitrary-call
    • Severity: High
    • Confidence: High
    • Check: pess-arbitrary-call-with-stored-erc20-approves
    • Severity: High
    • Confidence: High
    • Check: pess-arbitrary-call-destination-tainted
    • Severity: Medium
    • Confidence: Medium
    • Check: pess-arbitrary-call-calldata-tainted
    • Severity: Medium
    • Confidence: Medium

Description

The detector iterates over all low-level calls, checks if the destination or calldata could be tainted(manipulated). This detector consists of multiple detectors, which will run with this detector.

Potential Improvement

Filter out proxy results

Vulnerable Scenario

test scenarios

Recommendation

Do not allow users to make arbitrary calls.