pcaversaccio

Safe 1.4.1 Deployment via CreateX

Special thanks go to Richard Meissner for feedback and review.

Important

This approach requires a deep understanding of how the Safe contracts and CreateX mechanisms work. The recommended way to deploy a Safe contract remains through the SafeProxyFactory contract.

We will deploy a 1-out-of-1 1.4.1 Safe contract via CreateX.

setup Function

pcaversaccio

# pragma version ~=0.4.2
# pragma nonreentrancy off
"""
@title Multi-Token Recovery Contract
@custom:contract-name recoverooor
@license GNU Affero General Public License v3.0 only
@author pcaversaccio
@notice These functions support (batch) recovery of both native assets
        and tokens across any standard (e.g., ERC-20, ERC-721, ERC-1155).
        When using EIP-7702 (https://eips.ethereum.org/EIPS/eip-7702),

pcaversaccio

#!/usr/bin/env bash

##########################################
# Patch `safe_hashes.sh` Script API URLs #
##########################################

# @license GNU Affero General Public License v3.0 only
# @author pcaversaccio

# This Bash script modifies the default `safe_hashes.sh` script by

pcaversaccio

# pragma version ~=0.4.1
"""
@title Historical Block Hashes Oracle
@custom:contract-name block_hash_oracle
@license GNU Affero General Public License v3.0 only
@author pcaversaccio
@notice The contract function `block_hash` can be used to access the
        historical block hashes beyond the default 256-block limit.
        We use the EIP-2935 (https://eips.ethereum.org/EIPS/eip-2935)
        history contract, which maintains a ring buffer of the last

pcaversaccio

#!/usr/bin/env bash

while [[ "$#" -gt 0 ]]; do
	case $1 in
	--network)
		network="$2"
		shift
		;;
	--address)
		address="$2"

pcaversaccio

# pragma version ~=0.4.2
"""
@title `CREATE`, `CREATE2`, and `CREATE3` Utility Functions
@license GNU Affero General Public License v3.0 only
@author pcaversaccio
"""

PROXY_CHILD_BYTECODE: constant(Bytes[16]) = x"67363d3d37363d34f03d5260086018f3"

pcaversaccio

Reentrancy for Solidity Built-in Functions transfer and send

I only show this here for transfer, but it also applies to send.

// SPDX-License-Identifier: WTFPL
pragma solidity 0.8.29;

contract Victim {
    mapping(address account => uint256 balances) public balances;

pcaversaccio

import base58
import hashlib


def eth_to_tron(eth_address):
    eth_address_bytes = bytes.fromhex(
        eth_address[2:] if eth_address.startswith("0x") else eth_address
    )
    tron_address_bytes = b"\x41" + eth_address_bytes
    checksum = hashlib.sha256(hashlib.sha256(tron_address_bytes).digest()).digest()[:4]

pcaversaccio

import hashlib


def base58_encode(data: bytes) -> str:
    alphabet = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"
    value = int.from_bytes(data, "big")
    result = []

    while value:
        value, remainder = divmod(value, 58)

pcaversaccio

# pragma version ~=0.4.0rc5
"""
@title `erc4626_fees` Module Reference Implementation
@custom:contract-name erc4626_fees_mock
@license GNU Affero General Public License v3.0 only
@author pcaversaccio
@custom:security I have coded this in ~30mins. It's completely
                 untested code, so please be careful!
"""