mediumLogic errorCosmos-SDK
Allora: logic bug in this IBC middleware code related to packet handling.
- Payout
- $0
- Protocol
- Allora
- Disclosed
- Jul 19, 2024
- Source
- sherlock
The Allora chain's IBC GMP middleware failed to gate packet handling on the packet sender's identity: a commented-out sender-address check meant that OnRecvPacket would route any ICS-20 transfer whose memo unmarshals into a Message with a non-empty payload int …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.