ethereum-optimism / ethereum-optimism/optimism
Implement static analysis based checks to ensure that no `SSTORE` operations occur within `OPCM.upgrade()`.
Open
T-evm-safety
T-upgrades
- Dominant language
- Go
- Stars
- 6.5k
- Forks
- 4k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 145
Description
Because OPCM.upgrade and OPCM.addGameType are meant to be DELEGATECALLed, they must not make any storage writes.
Static analysis and/or concrete analysis should be used to enforce this property.
Contributor guide
Research direction
Start by locating the OPCM.upgrade and OPCM.addGameType entry points in the repository and inspect how their bytecode or execution is currently analyzed. Add static or concrete enforcement that OPCM.upgrade performs no SSTORE operations, and verify that the check also covers the stated delegate-call safety property.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- solidity
- Domain
- blockchain, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100