highLogic errorEVM-Solidity
Rio Network: swapValidatorDetails incorrectly writes keys to memory, resulting in permanently locked beacon chain deposits
- Payout
- $0
- Protocol
- Rio Network
- Disclosed
- Mar 7, 2024
- Source
- sherlock
In the Rio Network LRT core protocol, the assembly routine in ValidatorDetails.swapValidatorDetails reconstructs 48-byte BLS public keys in memory using two mstore calls, but the second call shifts _part2 right by 128 bits and writes at an offset that overwrit …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.