Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix trusted delegate calls migration #650

Merged
merged 1 commit into from
Jan 26, 2022
Merged

Fix trusted delegate calls migration #650

merged 1 commit into from
Jan 26, 2022

Conversation

Uxio0
Copy link
Member

@Uxio0 Uxio0 commented Jan 25, 2022

Don't trust old multisend contracts. They allow nested delegate calls

- Don't trust old multisend contracts
@Uxio0 Uxio0 requested review from a team, rmeissner, fmrsabino and luarx January 25, 2022 11:36
@coveralls
Copy link

Coverage Status

Coverage increased (+0.05%) to 88.855% when pulling 3096872 on fix-trusted-delegate into 17ac328 on master.

"0x998739BFdAAdde7C933B942a68053933098f9EDa",
"0x40A2aCCbd92BCA938b02010E17A5b8929b49130D",
"0xA1dabEF33b3B82c7814B6D82A79e50F4AC44102B",
# Multisend v1.1.1
"0x8D29bE29923b68abfDD21e541b9374737B49cdAD",
# "0x8D29bE29923b68abfDD21e541b9374737B49cdAD", Not safe, allows nested delegate calls
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This change will only be applied for services which didn't run this migration. Do we want to add an addition one where we set update(trusted_for_delegate_call=False) to these 2 addresses?

Copy link
Member Author

@Uxio0 Uxio0 Jan 26, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

That's not needed, as we did it manually for our services (and for others is up to the maintainers)

@Uxio0 Uxio0 merged commit a8a4e65 into master Jan 26, 2022
@Uxio0 Uxio0 deleted the fix-trusted-delegate branch January 26, 2022 11:48
@github-actions github-actions bot locked and limited conversation to collaborators Jan 26, 2022
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants