Cyfrin / aderyn

Aderyn 🦜 Rust-based Solidity AST analyzer.
https://docs.cyfrin.io/
GNU General Public License v2.0
414 stars 62 forks source link

Fix: New Strategy for ArbitraryTransferFrom Detector #776

Closed TilakMaddy closed 1 month ago

TilakMaddy commented 1 month ago

Trigger only in external / public functions when the argument to from matches the containing function's parameter list. Also make sure msg.sender was not checked anywhere to really know if it's arbitrary

Context: @devtooligan's suggestion