Yash Goyal (yashgoyal)

Found a security risk with EIP5792 in the farcaster app, @horsefacts.eth @v So, when we are batching approve and the send token transaction requiring approval, it is not showing the tokens being approved, even when the approval is for more than the requirement like unlimited. this would easily allow wallet drainers cc @samuellhuber.eth

• 3 replies
• 0 recasts
• 8 reactions

We tried using the EIP5792 sendCalls with an approve and send transaction (using usdc in a smart contract function), it is not working (only approving and not doing the second function call). Also found https://farcaster.xyz/yashgoyal/0x6cf91a41 Then we tried using multicall with the same functions calls, and it is returning an error "Provider.UnsupportedMethodError: Farcaster Wallet does not support the requested method: eth_call" because eth_call is not implemented or exposed by the farcaster client as shown in the attached image. @horsefacts.eth @v

• 3 replies
• 0 recasts
• 0 reactions

Thanks

• 0 replies
• 0 recasts
• 1 reaction

Thanks, do you have any take on why the second transaction is not being executed sometimes (where there isn't already enough allowance). But when there is already allowance, both transactions are being executed, confirmed from block explorer - https://etherscan.io/address/0x0e168B20007585608FBe812C757C9Bd1a58136CE

• 1 reply
• 0 recasts
• 1 reaction