Skip to content

Conversation

nlordell
Copy link
Collaborator

@nlordell nlordell commented May 13, 2025

It is possible to front-run a createProxyWithCallback deployment using createProxyWithNonce with a crafted saltNonce. This would make it so the proxy would be deployed, but the callback not executed. Since this method is not in use, we are deciding to deprecate it.

Alternatively, it would be possible to bring it back by using a different CREATE2 salt computation method in case this method is needed in the future. Integrations that require a specific call at deployment call can use the setup parameters with a to and data, which would guarantee a callback at deployment time.

It is possible to front-run a `createProxyWithCallback` deployment
using `createProxyWithNonce` with a crafted `saltNonce`. This would
make it so the proxy would be deployed, but the callback not executed.
Since this method is not in use, we are deciding to deprecate it.

Alternatively, it would be possible to bring it back by using a
different `CREATE2` salt computation method in case this method is
needed in the future.
@nlordell nlordell requested a review from a team as a code owner May 13, 2025 07:36
@nlordell nlordell requested review from rmeissner, akshay-ap, mmv08 and remedcu and removed request for a team May 13, 2025 07:36
@nlordell nlordell changed the base branch from main to audit/v1.5 May 13, 2025 07:38
Copy link
Member

@remedcu remedcu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Small question, rest LGTM 👍🏾

@nlordell nlordell merged commit dd43dab into audit/v1.5 May 27, 2025
17 of 19 checks passed
@nlordell nlordell deleted the ackee/m1 branch May 27, 2025 07:27
@github-actions github-actions bot locked and limited conversation to collaborators May 27, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants