Allow calls from deployed contracts only

neo-project · Aug 4, 2021 · 2fca9c3 · 2fca9c3
1 parent 6d71701
commit 2fca9c3
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/neo/SmartContract/Native/GasToken.cs b/src/neo/SmartContract/Native/GasToken.cs
@@ -41,6 +41,8 @@ internal override async ContractTask OnPersist(ApplicationEngine engine)
         private async ContractTask Refuel(ApplicationEngine engine, UInt160 account, long amount)
         {
             if (amount <= 0) throw new ArgumentOutOfRangeException(nameof(amount));
+            if (ContractManagement.GetContract(engine.Snapshot, engine.CallingScriptHash) is null)
+                throw new InvalidOperationException();
             if (!engine.CheckWitnessInternal(account)) throw new InvalidOperationException();
             engine.Refuel(amount);
             await Burn(engine, account, amount);