Root + Impact

Description

• Transactions should either execute or be cancelable.

• If a transaction always reverts (bad calldata, incompatible target, logic change), it becomes stuck forever.

  // 4. Execute the transaction

  (bool success,) = payable(txn.to).call{value: txn.value}(txn.data);

  if (!success) {

  revert MultiSigTimelock__ExecutionFailed();

  }

Risk

Likelihood:

• Happens when contract code at txn.to changes

• Happens with malformed calldata

Impact:

• ETH locked indefinitely

• Operational deadlock

Proof of Concept

Recommended Mitigation

Introduce transaction cancellation or failure state.