Using evm tx to transfer token to the module account causes the module account balance to be tainted

[summerpro]

• "Module account" is the system account used by each module to manage module funds. The transfer of tokens by ordinary users to the blacklisted "module account" is beyond expectations and should be prohibited
• When evm tx transfers the token, no "module account" verification is performed on the "to address"

solution:

Verify address when update StateObject, address should not be "module account".

[github-actions]

This issue is stale because it has been open 45 days with no activity. Remove stale label or comment or this will be closed in 7 days.