Submission Details
Severity:
executeMetaTransaction calls `address(this)` which does not have any function
Summary
In NativeMetaTransaction.sol, function executeMetaTransaction() calls address(this), which is itself. The contract does not have any important function with the address parameter, other than getNonce().
// Append userAddress and relayer address at the end to extract it from calling context
> (bool success, bytes memory returnData) = address(this).call{value: msg.value}(
abi.encodePacked(functionSignature, userAddress)
);
getNonce() is the only function that the relayer can help the user call, which is not useful.
function getNonce(address user) public view returns (uint256 nonce) {
nonce = nonces[user];
}
Impact
The low level call does not call anything useful.
Tools Used
Manual Review
Recommendations
Not sure about the intention, the relayer is supposed to call a contract that has an important function on behalf of the user.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
54128 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.