Web3SafetyOfficer

Security Researcher

Public Key

npub1rs7qlyv0a5xh0m6733dqymu409s4k70n0us4l8hrkudw3ltcncus2tlh6g

NIP-05 Address

Web3SafetyOfficer@BitcoinNostr.com

NIP-57 Address

Web3SafetyOfficer@coinos.io

Profile Code

nprofile1qqspc0q0jx876rthaa0gckszd72hjc2m08eh7g2lnm3mwxhgl4ufuwgpz3mhxue69uhhyetvv9ujuerpd46hxtnfduqs6amnwvaz7tmwdaejumr0dshu2j9j

Publishing to

relay.damus.io

nos.lol

Author Public Key

npub1rs7qlyv0a5xh0m6733dqymu409s4k70n0us4l8hrkudw3ltcncus2tlh6g

Show more details

Last Notes

2024-09-09 16:37:44

See how they make token scams and steal people's assets and funds at the right time.
In the transferFrom function, superOperator ability to bypass the check related to having enough allowances. As a result, this person can transfer funds of all users to any address without having enough allowances.
```
if (_msgSender() != from && !_superOperators[_msgSender()] && _msgSender() != _operator) {
uint256 currentAllowance = _allowances[from][_msgSender()];
if (currentAllowance != ~uint256(0)) {
require(currentAllowance >= amount, "NOT_AUTHORIZED_ALLOWANCE");
_allowances[from][_msgSender()] = currentAllowance - amount;
}
}
_transfer(from, to, amount);
```

2024-09-09 16:37:44