mediumLogic errorCosmos-SDK
Canto: Incorrect names provided in `RegisterConcrete` calls break `LegacyAmino` signing method
- Payout
- $0
- Protocol
- Canto
- Disclosed
- Aug 19, 2024
- Source
- code4rena
Canto's upgrade to Cosmos SDK v0.50 changed the Amino JSON codec, and to preserve legacy serialization behavior the team added amino.name tags to proto message types. This report catalogs mismatches between those proto tags and the names passed to RegisterConc …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-05-canto-findings/issues/2
- https://github.com/code-423n4/2024-05-canto-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.