Submission Details
Severity: medium
InvalidReplay/Outdated Proofs Vulnerability in Scrvusd Verifier Contracts
Author Revealed upon completion
Updates
Lead Judging Commences
Submission Judgement Published
Invalidated
Reason: Incorrect statement
Assigned finding tags:
[invalid] finding-replay-proof-lack-nonce
- All proof generated within `_proof_rlp` is generated via the off-chain prover, so there is no concrete proof that this proofs are non-unique. - All state roots and proofs must be verified by the OOS `StateProofVerifier` inherited as `Verifier`, so there is no proof that manipulating proofs can successfully pass a price update
Prize pool breakdown
Total prize
14,723 OP
Eagles
1,472 OP
nSLOC
39437 OP / LOC
High Medium
12,700
Low
551
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
View preliminary resultsAppeals Review
Appeals are being carefully reviewed by our judges.
Rewards Distribution
The contest is complete and the rewards are being distributed.