fix: [ALC-2] check paymaster address in hook as well (#309)

alchemyplatform · Nov 25, 2024 · d83d463 · d83d463
1 parent 3ee82bf
commit d83d463
Showing 1 changed file with 5 additions and 3 deletions.
diff --git a/src/modules/permissions/PaymasterGuardModule.sol b/src/modules/permissions/PaymasterGuardModule.sol
@@ -65,11 +65,13 @@ contract PaymasterGuardModule is ModuleBase, IValidationHookModule {
         returns (uint256)
     {
         address payingPaymaster = address(bytes20(userOp.paymasterAndData[:20]));
-        if (payingPaymaster == paymasters[entityId][msg.sender]) {
-            return 0;
-        } else {
+        if (payingPaymaster == address(0)) {
+            revert InvalidPaymaster();
+        }
+        if (payingPaymaster != paymasters[entityId][msg.sender]) {
             revert BadPaymasterSpecified();
         }
+        return 0;
     }
 
     /// @inheritdoc IValidationHookModule