All reports
mediumLogic errorCosmos-SDK

SEDA Protocol: Data requests queue can be DoS'ed

Payout
$0
Protocol
SEDA Protocol
Disclosed
Mar 10, 2025
Source
sherlock

SEDA's data-request submission is permissionless and only requires the caller to deposit enough tokens to cover the gas computed from self-supplied parameters. Because exec_gas_limit, tally_gas_limit, and gas_price are caller-controlled, an attacker can create …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.