highSignature replayEVM-Solidity
Chakra: `ChakraSettlement.receive_cross_chain_msg` and `ChakraSettlement.receive_cross_chain_callback` functions do not ensure that receiving `ChakraSettlement` contract's `contract_chain_name` must match `to_chain` corresponding to respective `txi…
- Payout
- $0
- Protocol
- Chakra
- Disclosed
- Feb 20, 2025
- Source
- code4rena
Chakra's cross-chain settlement functions sign and verify messages that do not bind the signed payload to the receiving chain's identity. Because validators and handlers can be deterministically deployed to the same address on multiple chains and can share ide …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-08-chakra-findings/issues/118
- https://github.com/code-423n4/2024-08-chakra-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.