HardhatFoundry
30,000 USDC
View results
Submission Details
Severity: medium
Valid

Current design does not work on zkSync

Summary

Current design does not work on zkSync due to its native account abstraction.

Vulnerability Details

README.md states under compatibilities:

Blockchains:
- Ethereum/Any EVM

Now zkSync is an EVM-compatible roll-up. However, the current design of Nexus on this roll-up is broken because zkSync has a set of unique characteristics. For example:

There is no native support for passing Ether on zkSync, so it is handled by a special system contract called MsgValueSimulator. The simulator receives the callee address and Ether amount, performs all necessary balance changes, and then calls the callee.

Which is not the case for the current Nexus design.

Impact

Nexus design is broken on zkSync.

Tools Used

  • Manual review.

  • zkSync docs.

Recommendations

Refactor the code to work on zkSync.

Updates

Lead Judging Commences

0xnevi Lead Judge 11 months ago
Submission Judgement Published
Validated
Assigned finding tags:

finding-zksync-create-create2-opcode

Valid medium, since there is non-functionality on zkSync (cannot create accounts) since it is stated as follows > Blockchains: > - Ethereum/Any EVM

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.