Skip to content

feat: Safe protection suite#69

Open
makemake-kbo wants to merge 6 commits into
masterfrom
safe-protection-suite
Open

feat: Safe protection suite#69
makemake-kbo wants to merge 6 commits into
masterfrom
safe-protection-suite

Conversation

@makemake-kbo
Copy link
Copy Markdown
Contributor

No description provided.

@makemake-kbo makemake-kbo marked this pull request as draft May 21, 2026 15:28
Comment thread src/protection/safe/README.md Outdated
Comment thread src/protection/safe/SafeConfigLockAssertion.sol
Comment thread src/protection/safe/SafeConfigLockAssertion.sol Outdated
Drop incorrect 'with calldata' qualifier on unknown-target blocking and
split the short-calldata bullet so allowEmptyCalldata (zero bytes) and
allowFallbackCalldata (one to three bytes) are named separately.
Skips assertion runs for txs that don't touch Safe storage (view-only
calls and module txs that only call external contracts). Tests that
relied on no-op calls now perform a benign threshold write to exercise
the trigger.
@makemake-kbo makemake-kbo marked this pull request as ready for review May 22, 2026 11:45
@makemake-kbo makemake-kbo requested a review from fredo May 25, 2026 13:58
Comment thread .github/workflows/solidity-test.yml
Comment thread src/protection/safe/SafeTxShapeHelpers.sol
Comment thread src/protection/safe/SafeTxShapeHelpers.sol Outdated
…ce cap

- Add (token, spender, kind) and (token, kind) mappings populated alongside
  the existing array so approval enforcement no longer scans on every action.
- For ERC20 increaseAllowance, bind the policy cap to the post-state
  allowance(safe, spender) instead of the per-call addedValue, so two
  consecutive increases inside a MultiSend cannot stack above maxAmount.
- README: clarify approve vs. increaseAllowance cap semantics.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants