highFront-running / MEVEVM-Solidity
Wildcat Protocol: `codehash` check in factory contracts does not account for non-empty addresses
- Payout
- $0
- Protocol
- Wildcat Protocol
- Disclosed
- Dec 11, 2023
- Source
- code4rena
Wildcat Protocol's factory and sentinel contracts verify contract deployment status by checking if an target address's `.codehash` is non-zero. However, per EIP-1052, accounts without deployed code that hold an ETH balance return `keccak256("")` rather than `b …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-10-wildcat-findings/issues/491
- https://github.com/code-423n4/2023-10-wildcat-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.