Official MASTR logo MASTR Support the work
Contents
← Wiki home

Wallets & security

Delegatecall authority

Delegatecall runs another contract's code in the caller's storage context.

Reference note · Sources below

Research articles and reference entries are published in English. Navigation is available in seven languages.

In this article
  1. Overview
  2. Why it matters
  3. What to check
  4. Sources

Overview

Delegatecall runs another contract's code in the caller's storage context.

Why it matters

A hostile target can alter balances, owners and configuration.

What to check

Trace target selection and storage assumptions.

Sources

Related reading

MASTR

Support independent research

The investigations, original evidence and guides here are free to read. Voluntary donations help fund the research and keep MASTR’s tools available.

Open wallet