This vulnerability is successfully fixed. A rental safe owner can no longer set a fallback handler of his own because the guard prevents it from happening now.
// Revert if the `setFallbackHandler` selector is specified.
if (selector == gnosis_safe_set_fallback_handler_selector) {
revert Errors.GuardPolicy_UnauthorizedSelector(
gnosis_safe_set_fallback_handler_selector
);
}
Lines of code
Vulnerability details
This vulnerability is successfully fixed. A rental safe owner can no longer set a fallback handler of his own because the guard prevents it from happening now.
https://github.com/re-nft/smart-contracts/blob/97e5753e5398da65d3d26735e9d6439c757720f5/src/policies/Guard.sol#L362C1-L367C14