medium10 pts · first answer countssecurityaccess-control

Using tx.origin for auth

Why is require(tx.origin == owner) dangerous for access control?

A.tx.origin costs too much gasB.tx.origin is always the zero addressC.If the owner is tricked into calling a malicious contract, that contract can call yours and tx.origin will still be the ownerD.tx.origin does not exist on Layer 2 networks

← Spot the reentrancy bug Packing storage variables →