Submission Details
Impact:
Likelihood:
Approving transactions by array index in MultiSig is vulnerable to front-running.
In MultiSig.sol, the approveTransaction function relies on the array index (_txId) to identify the transaction to approve. If an owner submits a transaction and subsequently sends an approval transaction assuming a specific index, another owner could front-run the approval by submitting a different transaction. This alters the expected index, causing the first owner to inadvertently approve the wrong transaction.
Rewards breakdown
This contest has a flat reward structure with the following payouts:
Live
The contest is live. Earn rewards by submitting a finding.
Judging
Submissions are being reviewed by our AI judge. Results will be available in a few minutes.
View all submissionsRewards Distribution
The contest is complete and the rewards are being distributed.