highLogic errorEVM-Solidity
DODO Cross-Chain DEX: Missing swap-withdrawal validation enables accumulated token drainage
- Payout
- $0
- Protocol
- DODO Cross-Chain DEX
- Disclosed
- Jun 9, 2025
- Source
- sherlock
DODO's ZetaChain cross-chain gateway failed to validate that the token produced by the on-chain swap matches the token later withdrawn to the destination chain. In GatewayCrossChain.sol, onCall swaps the input via _doMixSwap with params.toToken as the output b …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.