mediumLogic errorEVM-Solidity
MorphL2: Malicious sequencer can DoS proposal execution by inflating the amount of proposals to be pruned
- Payout
- $0
- Protocol
- MorphL2
- Disclosed
- Sep 23, 2024
- Source
- sherlock
Morph's L2 governance contract Gov.sol prunes all proposals between undeletedProposalStart and the ID being executed when any proposal is executed. Since createProposal() has no creation limits and is restricted only to sequencers, a malicious sequencer can in …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.