All reports
mediumFront-running / MEVEVM-Solidity

Tapioca: Composing approval with other messages is subject to DoS

Payout
$0
Protocol
Tapioca
Disclosed
Mar 15, 2024
Source
sherlock

Tapioca's TOFT::sendPacket allows a caller to pack multiple composed messages that are delivered to the destination chain and processed inside a single lzCompose invocation via the recursive nextMsg_ chain decoded by TapiocaOmnichainEngineCodec. If the first c …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.