what it is and which type of contracts it affects? Forked a few of these and want to let people know if they need to get out or warn their communities or whether it’s FUD
Some of them have the their dividend distributer function set to "public" - I have not spent the time yet reverse engineering it to know the exact steps the contract would use, but this will be where they are exploiting the contracts. You'll find the ones not vulnerable have their key functions set to internal/external/private as needed
I don’t understand why this would be exploitable unless it’s a check-effects-interactions thing, but I think the gas generally specified in calls is too low to exploit this, unless I’m missing something
Обсуждают сегодня