All reports
highLogic errorEVM-Solidity

Aleo: Aleo prover/network DOS vector due to invalid `split` proofs being free to abuse

Payout
$0
Protocol
Aleo
Disclosed
Jun 24, 2024
Source
sherlock

Aleo's snarkVM contains a fee-commitment gap for single-transition split transactions. For deploy and execute transactions, an accompanying fee transaction is consumed when the proof is invalid or finalization fails, which burdens invalid submissions with coll …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.