ERC-20 precompile: add zero-address validation in transfer/transferFrom
Open
bug
- Dominant language
- Go
- Stars
- 164
- Forks
- 213
- Avg merge
- 3d 58m
- Merged PRs (30d)
- 12
Description
The `transfer()` function in `precompiles/erc20/tx.go` doesn't validate that the recipient address is non-zero.
Per ERC-20 standard (EIP-20), transfers to address(0) should revert, but currently they succeed, causing permanent token loss.
Contributor guide
Assessment
This issue has not been assessed yet.