mediumLogic errorCosmos-SDK
ZetaChain: A single malicious observer can fill the block space with `MsgGasPriceVoter` messages without proper gas compensation resulting in griefing blocks
- Payout
- $0
- Protocol
- ZetaChain
- Disclosed
- Sep 6, 2024
- Source
- code4rena
A ZetaChain observer is able to grief the whole network's block space nearly for free because the GasPriceVoter message handler resets the Cosmos SDK gas meter on every invocation using ResetGasMeterAndConsumeGas. Since Cosmos allows multiple messages in a sin …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-11-zetachain-findings/issues/398
- https://github.com/code-423n4/2023-11-zetachain-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.