crytic / crytic/tealer

Detect paths missing ClearState transaction check

Open
#108 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
63
Forks
13
PR merge metrics
No merged PRs in 30d

Description

When a contract relies on validations performed in a different application, the contract checks that the target application is called in the group. The contract should also check that the Application call transaction is not a ClearState transaction. ClearState transaction executes the ClearState Program instead of the Approval Program. Because validations are generally performed in the Approval program, the contract will be vulnerable

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.