SKYBITDev3

Don't make `ERC2771Context` `_trustedForwarder` `immutable`

9

**🧐 Motivation** The article [Arbitrary Address Spoofing Attack: ERC2771Context Multicall Public Disclosure](https://blog.openzeppelin.com/arbitrary-address-spoofing-vulnerability-erc2771context-multicall-public-disclosure) published 3d ago says: >Some custom ERC2771Context implementations allow setting a trusted forwarder. Doing so can prevent any...

AccessControl uses wrong value for address parameter in authorization check

3

If an ERC20 token contract that inherits `ERC2771Context` has this function: ```solidity function mint(address to, uint256 amount) public onlyRole(MINTER_ROLE) { _mint(to, amount); } ``` which is called like this: ```js...

[Feature]: Use ethers v6

2

### Is your request related to a problem? Errors when trying to run web3-onboard after updating ethers package version to latest. ### Feature Description Update your code to use ethers...

CREATE2 documentation is incorrect

4

In the [Openzeppelin documentation of CREATE2](https://docs.openzeppelin.com/cli/2.8/deploying-with-create2#create2) it states that: > New addresses are a function of: > - `0xFF`, a constant that prevents collisions with `CREATE` > - The sender’s...

e.g. a search for `Pausable` at https://docs.openzeppelin.com/contracts/5.x-rc returns a link to https://docs.openzeppelin.com/contracts/4.x/api/security#Pausable , which is not suitable as it has been removed in v5.

Many errors in 25-defender-metatx-api

2

I've just tried the meta-transactions demo but found many errors when just following the instructions. It seems that it was published without checking that it works beforehand, which is bad...

Check that newly added signers can actually sign

5

There is a risk that when a multisignature Safe account is created, some signers whose addresses were added by the creator cannot actually sign (the Safe creator may not have...

Some users may want to keep their wealth as private as possible, including to recoverers. The recoverer needs to be given the Safe address. When she loads it up at...

OpenZeppelin have released v5 of their contracts: https://github.com/OpenZeppelin/openzeppelin-contracts/releases/tag/v5.0.0 It includes a number of updates to their MetaTransactions implementation, which may be good to use to improve OpenGSN's implementation. OpenGSN's implementation...

It would be good if we can try GSN on [Polygon zkEVM](https://polygon.technology/polygon-zkevm), as it uses zero-knowledge technology which offers low cost and high performance. It's EVM-based so we can use...