mediumLogic errorCosmos-SDK
Nibiru: Nonce can be manipulated by inserting a contract creation `EthereumTx` message first in an SDK TX with multiple `EthereumTX` messages
- Payout
- $0
- Protocol
- Nibiru
- Disclosed
- Feb 24, 2025
- Source
- code4rena
Nibiru's x/evm module fails to persist the sender account sequence correctly when multiple MsgEthereumTx messages are batched in one Cosmos-SDK transaction. The Ante handler advances the sequence once per message, but the ApplyEvmMsg execution path only writes …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-11-nibiru-findings/issues/29
- https://github.com/code-423n4/2024-11-nibiru-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.