mediumGovernance attackEVM-Solidity
Olympus On-Chain Governance: High risk checks can be bypassed with extra `calldata` padding
- Payout
- $0
- Protocol
- Olympus On-Chain Governance
- Disclosed
- Jan 25, 2024
- Source
- sherlock
Olympus On-Chain Governance's `GovernorBravoDelegate._isHighRiskProposal()` determines quorum thresholds by inspecting transaction calldata lengths and the kernel `executeAction` selector with strict byte-equality checks. Solidity ignores trailing bytes beyond …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.