You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
During creation and fee settings changes, a token contract checks if the new fee settings contract implements the interfaces required. A fee settings logic contract will pass this test, but is controlled by 0x. This means a token could never migrate away from this contract again.
Mitigation
avoid accidentally proposing a fee settings logic contract to a token, e.g. by reading the fee settings owner in the web app and rejecting if it is 0x (or not the owner we expect).
Fix
Have the token enforce that the owner of the fee settings contract is not 0x.
The text was updated successfully, but these errors were encountered:
Problem
During creation and fee settings changes, a token contract checks if the new fee settings contract implements the interfaces required. A fee settings logic contract will pass this test, but is controlled by 0x. This means a token could never migrate away from this contract again.
Mitigation
avoid accidentally proposing a fee settings logic contract to a token, e.g. by reading the fee settings owner in the web app and rejecting if it is 0x (or not the owner we expect).
Fix
Have the token enforce that the owner of the fee settings contract is not 0x.
The text was updated successfully, but these errors were encountered: