Skip to content

fix: prevent ETH lock in buildWithCast - #88

Open
angguntrie3-lgtm wants to merge 1 commit into
Instadapp:masterfrom
angguntrie3-lgtm:fix/buildWithCast-eth-lock
Open

fix: prevent ETH lock in buildWithCast#88
angguntrie3-lgtm wants to merge 1 commit into
Instadapp:masterfrom
angguntrie3-lgtm:fix/buildWithCast-eth-lock

Conversation

@angguntrie3-lgtm

@angguntrie3-lgtm angguntrie3-lgtm commented Aug 18, 2026

Copy link
Copy Markdown

hey, found a case where ETH can get stuck. if you call buildWithCast with ETH attached but an empty _targets array, the ETH is neither forwarded nor refunded. no way to get it back.

simple fix: require msg.value == 0 when targets is empty.

can reproduce this easily. let me know if you want a PoC.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

2 participants