Skip to main content

Delegate Call Vulnerability

Definition

A delegate call vulnerability refers to a security flaw in a smart contract where a malicious actor can exploit the DELEGATECALL opcode to execute arbitrary code with the privileges of the calling contract. This can lead to unauthorized changes in state variables, asset theft, or complete contract compromise. The vulnerability typically arises from improper validation of the target address or parameters in the delegate call. It represents a severe risk in smart contract programming.