zexoverz

Reviewer says Ethereum's ERC-8424 draft for private RWA tokens can leak a hidden balance within 64 calls

Reviewer zexoverz found that two functions in ERC-8424, a draft giving RWA issuers forced transfers over encrypted balances, can leak a balance within 64 calls. OpenZeppelin's own code already limits that view to holders, so the harder gap is rules whose failed transfers expose amounts.