highLogic errorCosmos-SDK
SEDA Protocol: Anyone can crash validators with a Tally VM program that panics the call_result_write import
- Payout
- $0
- Protocol
- SEDA Protocol
- Disclosed
- Mar 10, 2025
- Source
- sherlock
SEDA's Tally WASM VM exposes host imports that run in the validator node's process. The call_result_write import indexes into a zero-length default call_result_value without validating the user-supplied result_data_length, so a crafted Tally program can pass a …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.