mediumLogic errorEVM-Solidity
ZetaChain Cross-Chain: EVM outbound transaction gas limit can be set lower than the intrinsic gas limit, which prevents sending the transaction and blocks all other outbound transactions to this chain
- Payout
- $0
- Protocol
- ZetaChain Cross-Chain
- Disclosed
- May 12, 2025
- Source
- sherlock
A recent change to ZetaChain's zetaclient signer removed the lower-bound check on the gas limit applied to outbound EVM transactions. Because only a maximum (and a fixed 21k special case) is now enforced, an attacker can craft an outbound CCTX with a very low …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.