Skip to content

Latest commit

 

History

History
18 lines (18 loc) · 981 Bytes

Function ID collision between proxy, implementation in proxy-based upgradeable contracts.md

File metadata and controls

18 lines (18 loc) · 981 Bytes
Raw

100 - Function ID collision between proxy, implementation in proxy-based upgradeable contracts

Malicious proxy contracts may exploit function ID collision to invoke unintended proxy functions instead of delegating to implementation functions. Check for function ID collisions. (see here and here)

Slide Screenshot

0100.jpg

Slide Text

  • Function ID Collision
  • Proxy-based Contracts
  • Data Proxy -> Logic Impl.
  • Malicious Proxy -> Same
  • Function ID -> Hijack Call
  • Untrusted Proxy Function ID Collision

References

Tags