code-423n4 / 2023-01-biconomy-findings

12 stars 10 forks source link

Bypass `depositFor` Contract Check #520

Closed code423n4 closed 1 year ago

code423n4 commented 1 year ago

Lines of code

https://github.com/code-423n4/2023-01-biconomy/blob/main/scw-contracts/contracts/smart-contract-wallet/paymasters/verifying/singleton/VerifyingSingletonPaymaster.sol#L49

Vulnerability details

Validation will pass for a contract in construction; an address where a contract will be created; an address where a contract lived, but was destroyed.

c4-judge commented 1 year ago

gzeon-c4 marked the issue as unsatisfactory: Insufficient proof

c4-sponsor commented 1 year ago

livingrockrises marked the issue as sponsor disputed