mediumBridge exploitEVM-Solidity
Maia DAO: No deposit cross-chain calls/communication can still originate from a removed branch bridge agent
- Payout
- $0
- Protocol
- Maia DAO
- Disclosed
- Nov 29, 2023
- Source
- code4rena
When an administrator deactivates a branch bridge agent in Maia DAO's Ulysses Omnichain protocol, the agent's active status is toggled off in the BranchPort contract. However, the BranchBridgeAgent contract fails to verify its own activation status when proces …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-09-maia-findings/issues/564
- https://github.com/code-423n4/2023-09-maia-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.