Submission Details
Severity:
SIGNATURE_REPLAY_POSSIBILITY
Summary
Signature can be accepted several times
Vulnerability Details
Signed messages do not contain nonce parameter and the same signature can be passes several times
Impact
Lost money by several withdrawings using one signature
Tools Used
Recommendations
Add nonce parameter to the signature
Updates
Lead Judging Commences
0xnevi almost 2 years ago
Submission Judgement Published Assigned finding tags:
withdrawTokensToL1()/sendToL1(): signature replay
Rewards breakdown
nSLOC
99This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.