mediumLogic errorEVM-Solidity
M^0: Validator threshold can be bypassed: a single compromised validator can update minter's state to historical state
- Payout
- $0
- Protocol
- M^0
- Disclosed
- Mar 27, 2024
- Source
- sherlock
M^0's MinterGateway aggregates validator signatures to authorize collateral updates for minters, recording the minimum timestamp among all validators as the state's update time. Since a single compromised validator can produce an arbitrary timestamp, a colludi …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.