Thread by @HalbornSecurity

1/ Solidity is indispensable for developers building #decentralized applications‼️ This article will discuss how the delegatecall in #Solidity can introduce vulnerabilities in #smartcontracts and highlight measures for preventing issues associated with using it in your code.💡

2/ 𝗪𝗵𝗮𝘁 𝗜𝘀 𝗗𝗲𝗹𝗲𝗴𝗮𝘁𝗲𝗰𝗮𝗹𝗹?
In #Solidity, call and delegatecall are low-level interfaces for interacting with contracts. Triggering the call function in a contract causes the code at that address to execute in the context of the target contract.

3/ #delegatecall works differently because execution occurs in the context (programming environment) of the caller contract. For example, a delegatecall from contract A to contract B would modify contract B’s storage using functions in contract A. #smartcontracts

4/ delegatecall preserves the context of the original call, variables like msg.sender, msg.value, and msg.data don't change. This is useful in cases like proxy patterns. But this may cause #security issues, especially around access control in #smartcontracts.

5/ The delegatecall vulnerability can be prevented by using a “stateless library.” 📖Read more about #blockchainsecurity and preventing attacks here: halborn.com/blog/post/dele…