CVE-2023-32675

Name of the Vulnerable Software and Affected Versions Vyper versions prior to 0.3.8

Description In contracts with more than one regular nonpayable function, it is possible to send funds to the default function, even if the default function is marked nonpayable. This issue was fixed by the removal of the global calldatasize check.

Recommendations For versions prior to 0.3.8, upgrade to version 0.3.8. For users unable to upgrade, avoid use of nonpayable default functions.