highLogic errorSolana-Rust
ZetaChain Cross-Chain: Dirty EVM state changes are not committed before precompile calls, resulting in double-spending or loss of ZETA tokens
- Payout
- $0
- Protocol
- ZetaChain Cross-Chain
- Disclosed
- May 12, 2025
- Source
- sherlock
ZetaChain's EVM is implemented as ethermint on top of Cosmos SDK, and its staking precompiles execute Cosmos SDK logic (delegate, claim rewards) without first committing pending EVM statedb changes into the SDK state. SDK actions therefore read a stale balance …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.