hard20 pts · first answer countssmart-contract-securityaccount-abstractioncreate2
Claiming someone's future wallet
A factory deploys smart wallets with CREATE2, salt = keccak256(user), and calls initialize(owner) after deployment. Users get funds sent to the predicted address before it exists. What can an attacker do?
Discussion 0
Join free to post in the discussion.
Related questions
- Private variables are public dataBlockchain Developer
- Verifying a contract on EtherscanBlockchain Developer
- Sharing a seed phraseBlockchain Developer
- Why use OpenZeppelinBlockchain Developer
- The checks-effects-interactions orderBlockchain Developer
- What nonReentrant doesBlockchain Developer
- What front-running isBlockchain Developer
- Anyone can mintBlockchain Developer