A low-level call will copy any amount of bytes to local memory. When bytes are copied from returndata to memory, the memory expansion cost is paid.This means that when using a standard solidity call, the callee can returnbomb
the caller, imposing an arbitrary gas cost.Because this gas is paid by the caller and in the caller's context, it can cause the caller to run out of gas and halt execution.
Instances (1):
File: ProxyFactory.sol
250: (bool success,) = proxy.call(data);
manual audit
Consider replacing all unsafe call
with excessivelySafeCall
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.