Skip to content

Comments

Fix [M-01] Hook bypass for module installation via module enable mode#267

Merged
filmakarov merged 1 commit intorelease/v1.2.0from
fix/m-01-hook-bypass-module-enable-mode
Mar 30, 2025
Merged

Fix [M-01] Hook bypass for module installation via module enable mode#267
filmakarov merged 1 commit intorelease/v1.2.0from
fix/m-01-hook-bypass-module-enable-mode

Conversation

@filmakarov
Copy link
Collaborator

@filmakarov filmakarov commented Mar 27, 2025

Fix https://github.com/PashovAuditGroup/Nexus_March25_MERGED/issues/13


PR-Codex overview

This PR focuses on enhancing the ModuleManager and related contracts by refining module installation functionalities, introducing a new EmittingHook contract, and updating interfaces for better modular management.

Detailed summary

  • Added installModule, uninstallModule, and isModuleInstalled functions in NexusBootstrap.
  • Updated IERC7579Account interface to remove IModuleManager.
  • Changed assertions in tests to use IModuleManager.
  • Enhanced installModule method in Nexus to be virtual override.
  • Introduced EmittingHook contract with various event emissions.
  • Updated ModuleManager to utilize IModuleManager.
  • Added a new test for module recognition by hooks in TestModuleManager_EnableMode.

✨ Ask PR-Codex anything about this PR by commenting with /codex {your question}

@github-actions
Copy link

🤖 Slither Analysis Report 🔎

Slither report

Details # Slither report

THIS CHECKLIST IS NOT COMPLETE. Use --show-ignored-findings to show all the results.
Summary
🟡 - unused-return (2 results) (Medium)

unused-return

🟡 Impact: Medium
🟡 Confidence: Medium

base/ModuleManager.sol#L256-L260

base/ModuleManager.sol#L233-L242

constable-states

Impact: Optimization
🔴 Confidence: High

base/RegistryAdapter.sol#L10

factory/RegistryFactory.sol#L38

_This comment was automatically generated by the GitHub Actions workflow._

@openzeppelin-code
Copy link

Fix [M-01] Hook bypass for module installation via module enable mode

Generated at commit: 5af7aa8fc33f3378d972de2162a4def5f5aa78aa

🚨 Report Summary

Severity Level Results
Contracts Critical
High
Medium
Low
Note
Total
1
1
0
7
30
39

For more details view the full report in OpenZeppelin Code Inspector

@filmakarov filmakarov merged commit d84c35e into release/v1.2.0 Mar 30, 2025
5 of 9 checks passed
@filmakarov filmakarov deleted the fix/m-01-hook-bypass-module-enable-mode branch March 30, 2025 06:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant