status-network-token
status-network-token copied to clipboard
High : checking if caller during sale is done incorrectly
// Do not allow contracts to game the system
require(!isContract(caller));
There’s a well‑known case where a caller has codesize of 0 and is a contract. It should always use a tx.origin
comparison instead.
Still better to fix it for those who might copy this wrong code.