mediumBridge exploitEVM-Solidity
Optimism Fault Proofs: Incorrect game type can be proven and finalized due to unsafe cast
- Payout
- $0
- Protocol
- Optimism Fault Proofs
- Disclosed
- Apr 4, 2024
- Source
- sherlock
In Optimism's Fault Proof system, the `raw()` helper used by OptimismPortal2 to compare a dispute game's type against the portal's respected game type unsafely downcasts the 32-bit `GameType` to `uint8`, so any two game types sharing the same low byte are trea …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.