mediumLogic errorEVM-Solidity
MorphL2: The 255th staker in `L1Staking.sol` can avoid getting slashed and inadvertently cause fund loss to stakers
- Payout
- $0
- Protocol
- MorphL2
- Disclosed
- Sep 23, 2024
- Source
- sherlock
MorphL2's L1Staking.sol supports up to 255 active stakers, but the getStakersFromBitmap helper iterates its bit loop only up to i < 255, skipping the bit that represents the 255th staker. When a challenged batch is committed by that staker, slash() expands the …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.