It is known that msg.sender
must be used for authentication instead of tx.origin
(the difference explained here). Some static analysis tools (e.g., in Remix) detect all usages of tx.origin
as potential vulnerabilities and advise to use msg.sender
instead.
What are the use cases where tx.origin
is legitimate? If there are none, is tx.origin
going to be deprecated?