Submission Details
Severity:
Gas griefing/theft is possible on unsafe external call
Summary
Gas griefing/theft is possible on unsafe external call
Vulnerability Details
return data (bool success,) has to be stored due to EVM architecture, if in a usage like below, ‘out’ and ‘outsize’ values are given (0,0) . Thus, this storage disappears and may come from external contracts a possible Gas griefing/theft problem is avoided
Proof Of Concept
File:2023-09-ditto/contracts/bridges/BridgeReth.sol
105: (bool sent,) = to.call{value: netBalance}
Context:-
Prize pool breakdown
Total prize
55,000 USDC
nSLOC
3,36516 USDC / LOC
50,000 USDC
5,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.