Why it matters
A single malicious delegatecall can instantly transfer or destroy user and treasury assets, creating material investor losses and regulatory scrutiny.
Risk Triggers
External Call Input
Missing Allowlist
No Function Modifier
Unvetted Upgrade
Controls & Mitigations
Sign in to view the monitoring controls, controls mitigations, and mitigation guidance for this red flag.
Risk profile
Sign in to view the risk matrix, time sensitivity, categories, impacted components, and detection methods for this red flag.