Submission Details
Severity:
Potential Replay Attack on Oracle Updates
Updates
Lead Judging Commences
0xnevi
3 months ago
0xnevi about 2 months ago
Submission Judgement Published Reason: Out of scope
Assigned finding tags:
[invalid] finding-replay-proof-lack-nonce
- All proof generated within `_proof_rlp` is generated via the off-chain prover, so there is no concrete proof that this proofs are non-unique. - All state roots and proofs must be verified by the OOS `StateProofVerifier` inherited as `Verifier`, so there is no proof that manipulating proofs can successfully pass a price update
Prize pool breakdown
Total prize
14,723 OP
Eagles
1,472 OP
nSLOC
39437 OP / LOC
12,700
551
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.