mediumLogic errorEVM-Solidity
Centrifuge Protocol V3.1: Inadequate gas reservation in `Gateway.handle()` try-catch block enables permanent DOS via batch-level gas exhaustion
- Payout
- $0
- Protocol
- Centrifuge Protocol V3.1
- Disclosed
- Nov 17, 2025
- Source
- sherlock
Centrifuge's Gateway.handle() processes batched cross-chain messages in a loop but reserves only GAS_FAIL_MESSAGE_STORAGE (40k gas) for the current message via gasleft() - 40k, ignoring the gas needs of all remaining messages. Because a permissionless updateCo …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.