All reports
mediumLogic errorCosmos-SDK

ZetaChain Cross-Chain: Removing an observer doesn't update an active ballot's voter list, leading to deadlocks

Payout
$0
Protocol
ZetaChain Cross-Chain
Disclosed
May 12, 2025
Source
sherlock

In ZetaChain's Cosmos-SDK observer module, each ballot takes a static snapshot of the active observer set into its VoterList at creation time, and only those listed observers may vote. When a validator is slashed or its self-delegation falls below the minimum, …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.