mediumAccess controlEVM-Solidity
Centrifuge Protocol V3.1: Gas engineering during `adapter` execution can be used to maliciously split critical message batches
- Payout
- $0
- Protocol
- Centrifuge Protocol V3.1
- Disclosed
- Nov 17, 2025
- Source
- sherlock
Centrifuge's AxelarAdapter.execute() is permissionless and forwards caller-supplied gas straight into Gateway.handle(), which processes each batched cross-chain message inside an isolate try-catch that stores failed messages in failedMessages rather than rever …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.