Wouldn'T it be secure enough to allow transferFrom() if (tx.origin==from)

Question

as an alternative to having to do approvals?

So you check (tx.origin==from || amount<=allowance[from][msg.sender])

0

24.10.2021

13 просмотров

The only difference is the number of transactions not the actual security

0

24.10.2021

msg.sender :)

0

24.10.2021

Read about Rune token

0

24.10.2021

I dont quite get it. how does tx.origin suddenly steals all the user’s tokens?

0

24.10.2021

I meant "evil dapp steals tokens" - it forwards some user's request

0

24.10.2021

like this https://solidity-by-example.org/hacks/phishing-with-tx-origin/

0

24.10.2021

0

27.10.2021

deepcode.eth • Roman P · Accepted Answer

An attack scenario: unsuspecting users interact with some closed-source dapp; it suddenly steals all their tokens.

0

24.10.2021