scout
scout copied to clipboard
`Zero-or-test-address` upgrades
- Check if the address passed is using in
mapping.get(). This is not a problem - Check if
0x...0is hardcoded. - Following the last point, we can check for all addresses with known public key (as Alice, Bob...)
Discussion question:
- OpenBrush has a AccountIdExt that thas the
is_zero()method. Should we support this as a check? - Emit Events have any issue using a 0 address? Or we can make the
emit_event()whitelisted?
Check if the detection is done in an #[ink(message)]. The detector could not trigger in private functions, as the check should be done in the public one.
Following #130 and M3 issues.