Submission Details
Severity:
Signature malleability in sendToL1 function.
Summary
The function sendToL1 can be tricked that the signer is other that the real signer
Vulnerability Details
ECDSA signatures are naturally malleable and can be modified while maintaining validity.
To get another signature that recovers to the same signer we flip the S and V
Impact
High as it will lead to stolen funds.
Tools Used
Manual review
Recommendations
Rewards breakdown
nSLOC
99This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.