mediumBridge exploitEVM-Solidity
DODO Cross-Chain DEX: Improper ETH Refund Handling in GatewaySend.onRevert()
- Payout
- $0
- Protocol
- DODO Cross-Chain DEX
- Disclosed
- Jun 9, 2025
- Source
- sherlock
DODO's cross-chain GatewaySend contract refunds users with native ETH when a bridged transaction reverts on the destination chain. Because onRevert() routes the refund through TransferHelper.safeTransfer() — a helper built exclusively for ERC20 transfers — the …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.