Unprotected SELFDESTRUCT

From WEB3 Vulnerapedia
Jump to navigation Jump to search

EVM selfdestruct instruction is used to end execution, delete the code at the address that calls it, and forcefully transfer the balance to an indicated address[1].

It can be problematic if the function containing this instruction is publicly available. For example, there were instances where implementations of proxies were deleted because of this.

Deprecation

selfdestruct has been deprecated in Solidity and Yul since the 0.8.18 version, and developers are encouraged not to use it anymore because it'll most likely be removed from EVM in the future. See EIP-6049.