All reports
mediumReentrancyEVM-Solidity

HatsSignerGate v2: Signer can avoid restrictions and change `safe` state variables

Payout
$0
Protocol
HatsSignerGate v2
Disclosed
Nov 23, 2024
Source
sherlock

HatsSignerGate v2 wraps a Safe multisig and, to prevent delegatecall execution from mutating Safe state, records the current owners hash, threshold, and fallback handler inside `checkTransaction` and re-validates them in `checkAfterExecution`. Because `checkTr …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.