First Flight #4: Boss Bridge

Summary

The deposit event should have a chain ID parameter to help the off-chain service verify the source blockchain.

Vulnerability Details

Chain ID is not provided in the deposit event. Adding a chain ID parameter to the Deposit event can provide additional security.

Impact

It would be difficult for the off-chain services to identify the source blockchain from which the event occurred.

Tools Used

forge

Recommendations

make change in the Deposit event "event Deposit(address from,address to,uint256 amount,uint256 chainId)". It would be easier for the off-chain service to filter fake events.