According to ChainCatcher, the security company Dedaub team discovered a vulnerability in the Ethereum programming language Solidity compiler, which caused the deployed contract bytecode to include dead code, greatly increasing the gas fee cost when deploying and operating smart contracts. Dedaub said that the team discovered this error when evaluating the open source binary splitter Gigahorse. The vulnerability occurs when the library method is only called by the constructor of the contract.

Through Gigahorse analysis, Dedaub found that at least 35% of the contracts had some dead code, of which 33% accounted for most of the bytecode they ran. These results are dominated by NFT proxies, but other proxy contracts have the same problem. For large contracts, this problem can be ignored, but most deployed contracts are small contracts. The Dedain team discovered this error in November last year and alerted the Solidity team to confirm the problem. (Source link)