mediumLogic errorEVM-Solidity
SYMMIO v0.8.4 Update: Force Close can be DOSed by exploiting `settleUpnl` function
- Payout
- $0
- Protocol
- SYMMIO v0.8.4 Update
- Disclosed
- Oct 8, 2024
- Source
- sherlock
SYMMIO's newly added settleUpnl function lets a PartyB grief PartyA by incrementing the counterparty's nonce out from under a pending forceClosePosition transaction. Because a SettlementSig with empty quotesSettlementsData/partyBs arrays is accepted, because t …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.