hard20 pts · first answer countssmart-contract-securityaccess-controlapprovals

A router that calls anything

Users approve a router to spend their tokens. The router has execute(address target, bytes data) that calls target with data for "flexible integrations". What can an attacker do?

A.Only call functions defined on the router contract itselfB.Only spend tokens the attacker has approved to the routerC.Have the router call token.transferFrom(victim, attacker, amt)D.Nothing, unless the victim signs a fresh permit first

Discussion 0

Join free to post in the discussion.

A router that calls anything

Discussion 0

Related questions