matter-labs / zksync-era

zkSync era
Apache License 2.0
3.1k stars 2.07k forks source link

Unrestricted External Call in `fallback` Function #1279

Open mr-teikst opened 8 months ago

mr-teikst commented 8 months ago

🐛 Bug Report

Unrestricted External Call in fallback Function

📝 Description

The fallback function allows external calls without restrictions. This can pose a security risk, especially if the contract holds funds or interacts with external contracts. Consider adding access control or limiting external calls to trusted contracts only.

address: core/tests/ts-integration/contracts/custom-account/custom-account.sol

EmilLuta commented 7 months ago

cc: @vladbochok