All reports
highInteger overflow/underflowEVM-Solidity

zkSync: Missing range constraint on remainder check in `div` opcode implementation

Payout
$0
Protocol
zkSync
Disclosed
Feb 29, 2024
Source
code4rena

zkSync Era's zkEVM circuit enforces the invariant that a division remainder is smaller than its divisor by subtracting the divisor from the remainder and asserting a borrow flag. The subtraction output's limbs are never range-constrained, so a prover can injec …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.