Skip to content

Commit b90b3a4

Browse files
amiecorsoDark-Brain07
authored andcommitted
Add warning for safe 7702 upgrades (coinbase#156)
* add warning not to 7702-delegate directly to CBSW impl * update text for gh style warning * match katzman's
1 parent 8cdaace commit b90b3a4

File tree

1 file changed

+8
-0
lines changed

1 file changed

+8
-0
lines changed

README.md

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -78,6 +78,14 @@ Today, allowed are
7878
- MultiOwnable.removeOwnerAtIndex
7979
- UUPSUpgradeable.upgradeToAndCall
8080

81+
> [!WARNING]
82+
> ## EIP-7702 delegation safety
83+
> Do **not** directly delegate to a Coinbase Smart Wallet **implementation** contract via EIP-7702. Delegating directly to an implementation can create a security vulnerability.
84+
>
85+
> Instead:
86+
> - Use the `EIP7702Proxy` pattern: [base/eip-7702-proxy](https://github.com/base/eip-7702-proxy)
87+
> - See Coinbase Developer Platform docs for further guidance and an example of performing a safe EIP-7702 upgrade: [EIP-7702 FAQs – safe upgrade](https://docs.cdp.coinbase.com/paymaster/need-to-knows/eip-7702-faqs#how-do-i-upgrade-my-wallet-to-7702)
88+
8189
## Deployments
8290
Factory and implementation are deployed via [Safe Singleton Factory](https://github.com/safe-global/safe-singleton-factory), which today will give the same address across 248 chains. See "Deploying" below for instructions on how to deploy to new chains.
8391
| Version | Factory Address |

0 commit comments

Comments
 (0)