mediumLogic errorEVM-Solidity
Elfi: The implementation of `payExecutionFee()` didn't take `EIP-150` into consideration. Keepers can steal additional execution fee from users.
- Payout
- $0
- Protocol
- Elfi
- Disclosed
- Jun 20, 2024
- Source
- sherlock
Elfi's GasProcess.processExecutionFee() undercharges nothing but over-counts gas: it derives the keeper's execution fee as startGas minus gasleft(), yet because the call into the external library is governed by EIP-150, only 63/64 of the remaining gas is forwa …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.