unsafe-low-level-call

Detect unsafe low-level calls in Solidity smart contracts by scanning for instances where .call(), .delegatecall(), .staticcall(), or .send() are used without checking return values. This process identifies vulnerabilities from silent failures and ensures proper error handling.

Unchecked return values from .call() create security vulnerabilities because the operation fails silently without reverting. This allows execution to continue despite failed external calls, potentially causing unexpected state changes and leaving the contract vulnerable to exploitation.

Secure low-level calls to non-existent contract addresses by enforcing explicit target code verification before execution. This secure coding practice requires validating that the target address has code, preventing unexpected behavior when interacting with empty addresses.

Audit Solidity contracts for low-level call vulnerabilities by analyzing the code to ensure all external calls enforce explicit success checks. This remediation process verifies that untrusted addresses and critical state changes are robust against failures and reentrancy.

Avoid using low-level calls like .delegatecall() when interacting with untrusted addresses or managing critical state changes. If you cannot enforce explicit success checks and verify target code existence, these calls introduce severe silent failure and reentrancy risks.