Babylon Chain Launch (Phase-2) — disclosed vulnerability reports and payouts

Babylon Chain Launch (Phase-2): Refund mechanism doesn't make sure that there is a fee granter

Babylon's Phase-2 incentive module implements a gas-fee refund in RefundTx that always sends the refunded fee back to the message's fee payer. Because Cosmos supports a fee-granter relationship in which a third party sponsors another account's transaction gas, the refund gets misrouted to the sender rather than to the account that actually funded the transaction. As a result, a fee granter who paid the gas never recovers the refunded amount and effectively loses funds. The finding was accepted and fixed by routing the refund to the fee granter when one is set, following Celestia's approach.