ERC-4337 - Can Token owners remotely delete token supplies from abstract smart contract wallets? - Security - Ethereum Research


    
    
  
    Ethereum Research
  


    
        
    
      ERC-4337 - Can Token owners remotely delete token supplies from abstract smart contract wallets?
    


      
          
            
              
              
                Security
              
            
            



      

        

            

            
              
                howardleejh
                
              

              



              
                  
                    April 17, 2023,  8:18am
                  
                  

1
              
            
            
              Firstly, apologies as I’m a noob here, can I ask what happens when exploiters create an ICO project and sell their tokens, and upon completion of sale, decides to burn all the tokens that belong to abstract smart contract wallet owners? Am I right to say that because a smart contract does not require an approve() before making a safeTransferFrom() to a 0x00 address, essentially “burning the tokens” and affecting total supply on the ERC20 tokens, that this might be a possible exploit for ERC-4337 smart contract wallet owners?

            


            
              

            

            
                

            
              
                howardleejh
                
              

              



              
                  
                    April 17, 2023,  8:24am
                  
                  

2
              
            
            
              Sorry, just read forum rules and shouldn’t be posting this here. My bad.

            


            
              

            

            
                
	
        
          Home 
        
      
	
        
          Categories 
        
      
	
        
          FAQ/Guidelines 
        
      
	
          
            Terms of Service 
          
        
	
          
            Privacy Policy 
          
        


  
  Powered by Discourse, best viewed with JavaScript enabled