mediumLogic errorCosmos-SDK
SEDA Protocol: Anyone can post a request with `gasPrice` of 0 to cause SEDA chain to halt
- Payout
- $0
- Protocol
- SEDA Protocol
- Disclosed
- Mar 10, 2025
- Source
- sherlock
SEDA's Core contract accepts data requests without validating that gasPrice is non-zero, while its Tally module divides a proxy fee by that gasPrice when metering gas during endblock processing. Posting a request with gasPrice 0, replicationFactor 1, and no fi …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.