highLogic errorEVM-Solidity
Axis Finance: It is possible to DoS batch auctions by submitting invalid AltBn128 points when bidding
- Payout
- $0
- Protocol
- Axis Finance
- Disclosed
- Mar 30, 2024
- Source
- sherlock
Axis Finance's Encrypted Marginal Price Auction (EMPA) relies on a simplified ECIES implementation over the AltBn128 curve. The `isValid()` check confirms a submitted bid public key is on the curve and is not the generator or identity points, but it never veri …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.