Sitelet https://github.com/1inch/solidity-utils/issues

Issues

[MEDIUM] Short slices returned by BytesMemory::unwrap() leak adjacent data
1inch/solidity-utils#259 · opened on May 7, 2026
[HIGH] BytesMemory.unwrap misaligns the free-memory pointer, enabling overlapping allocations and tampering with previously returned bytes
1inch/solidity-utils#258 · opened on May 7, 2026
[HIGH] StringUtil::toHex(bytes) under-allocates free memory, enabling deterministic memory overlap that corrupts hex strings and downstream dynamic data
1inch/solidity-utils#257 · opened on May 7, 2026
[HIGH] Delegatecall-exposed functions use msg.sender instead of _msgSender(), allowing relayers to receive funds or control flows when executing signed calls
1inch/solidity-utils#256 · opened on May 7, 2026
[HIGH] Signer impersonation via reentrancy because _msgSender() trusts stale stack entries
1inch/solidity-utils#255 · opened on May 7, 2026
[HIGH] Reentrancy allows arbitrary contracts to impersonate the signer during meta-calls
1inch/solidity-utils#254 · opened on May 7, 2026
[HIGH] Signer context persists during bySig delegatecalls, enabling reentrant impersonation of signer-protected functions
1inch/solidity-utils#253 · opened on May 7, 2026
[HIGH] Using msg.sender instead of _msgSender() allows relayers to receive funds intended for the signed caller
1inch/solidity-utils#252 · opened on May 7, 2026
Free OAPS Pilot – Verifiable On-Chain Proof for solidity-utils Artifacts
1inch/solidity-utils#222 · opened on Jan 13, 2026
type error: deployContract from utils.ts
1inch/solidity-utils#208 · opened on Oct 2, 2025