data/samples/task3/unsafe_delegatecall.sol

// SPDX-License-Identifier: MIT
pragma solidity ^0.8.20;

contract UnsafeDelegateCall {
    address public implementation;
    address public owner;
    
    constructor() {
        owner = msg.sender;
    }
    
    function setImplementation(address _implementation) external {
        require(msg.sender == owner, "Not owner");
        implementation = _implementation;
    }
    
    function execute(bytes calldata data) external {
        // Dangerous delegatecall without proper validation
        (bool success, ) = implementation.delegatecall(data);
        require(success, "Delegatecall failed");
    }
    
    fallback() external {
        // Unrestricted delegatecall in fallback
        implementation.delegatecall(msg.data);
    }
}