TempleTeleporter.quote()returns smaller fee than the expected one.
A teleport message is a 64-byte sequence where the first 32 bytes are the sender's address and the second 32 bytes is the amount to be teleported.
The above function quotes the Endpoint assuming the address is 20-bytes long
This will result in a message that is 52 bytes instead of 64 and the returned fee will be less than the actual fee
Users that query this function will send less funds than needed and their tokens will not be teleported.
Manual Review
Use abi.encode
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.