Proxy Contract Support

[ziegfried]

Proxy contracts are a common pattern used for different purposes, such as making smart contracts upgradable or reducing the amount of bytecode to deploy several copies of similar contracts. Instead of calling a contract directly, a proxy contract is called, which then in turn invokes the target contract via DELEGATECALL. This indirection renders contract fingerprinting useless.

Goal of this feature is to automatically detect common types of proxies, annotate Splunk events with some addtional information about the proxy (type, target) and to ABI decode based on the target contract.

Proxy standards to investigate/support:

• EIP-1967 Standard Proxy Storage Slots
• EIP-1167 Minimal Proxy Contract
• EIP-1822 Universal Upgradeable Proxy Standard