Skip to main content

DelegateCall Flaw

Definition

The DelegateCall flaw refers to a critical vulnerability in Ethereum smart contracts that arises from the improper use of the delegatecall opcode. This opcode allows a contract to execute code from another contract in the context of the calling contract’s storage, leading to potential unintended state modifications. If a malicious or poorly audited contract is called via delegatecall, it can manipulate the calling contract’s data or even drain its funds. This security defect highlights the complexities of smart contract programming.