The test/example Safe signer launchpad pattern in the ERC-4337 module directory did not contain an important security check preventing double initialization which could lead to an account being taken over.
In order to better document the security requirements for such a contract, we added the double initialization check to the pre-validation setup.
Huge kudos to Ackee Blockchain for bringing this to our attention :muscle:.
The test/example Safe signer launchpad pattern in the ERC-4337 module directory did not contain an important security check preventing double initialization which could lead to an account being taken over.
In order to better document the security requirements for such a contract, we added the double initialization check to the pre-validation setup.
Huge kudos to Ackee Blockchain for bringing this to our attention :muscle:.