Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

audit: TimelockExecutionStrategy Deployed as Proxy at Risk From Implementation SELFDESTRUCT #223

Closed
Orland0x opened this issue Jun 26, 2023 · 0 comments · Fixed by #224
Closed

Comments

@Orland0x
Copy link
Contributor

It is expected that TimelockExecutionStrategy will be deployed as a proxy contract. However, it is critical that the implementation contract shared by the proxies is disabled, and cannot execute transactions. If the base implementation contract is in operation, a transaction could perform a delegate call into a contract containing the SELFDESTRUCT opcode, irrecoverably disabling all the proxies using that implementation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant