highLogic errorCosmos-SDK
Allora: The worker and reputer's payload may be tampered due to lack of check for the pubkey's ownership
- Payout
- $0
- Protocol
- Allora
- Disclosed
- Jul 19, 2024
- Source
- sherlock
Allora's emissions module accepts worker and reputer data bundles through InsertBulkWorkerPayload and InsertBulkReputerPayload. The bundle validation verifies that a payload's signature matches a supplied pubkey, but never verifies that the pubkey actually bel …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.