A place for talking about the Ethereum Virtual Machine on Farcaster.

Yesterday while experimenting with CreateX, I saw some weird events emitted by a contract.

Chased it down to an odd behavior in an ERC1967Proxy contract.
Turned out: it was a malicious backdoor hidden in plain sight.

🧵

Weso

👀 

https://x.com/the_weso/status/1943055239315145100?t=d-sQsPf6nROJlMbNLW_-WA&s=19

Im the guy that posted all those factory memes once

If you are deploying a proxy and not initializing it on deployment, your deploy logic shouldn't get through an audit