Call data allows any data to be passed

Description

The contract's transaction proposal mechanism accepts arbitrary call data, enabling invocation of any function on the target contract. This unrestricted input can lead to execution of unauthorized or harmful operations if the proposer is malicious or compromised.

Risk

Likelihood: High
An attacker or malicious proposer can submit transactions invoking any function on the destination address.

Impact: High
This may result in unauthorized state changes, asset transfers, or other malicious effects depending on the called function’s logic.

Proof of Concept

Mitigation

Implement strict validation on the calldata input by maintaining an allowlist of permitted functions or actions callable via the transaction proposal. This can be achieved by:

• Restricting data to encoded calls matching predefined function selectors.

• Validating the target address and calldata before acceptance.

• Enforcing access control on proposers able to submit arbitrary call data.