All reports
mediumLogic errorEVM-Solidity

zkSync: Incorrect max precompile address

Payout
$0
Protocol
zkSync
Disclosed
Feb 29, 2024
Source
code4rena

zkSync Era introduced ECADD and ECMUL precompiles but left the CURRENT_MAX_PRECOMPILE_ADDRESS sentinel pointing at the old SHA256_SYSTEM_CONTRACT. Because system contracts like AccountCodeStorage consult this constant to decide whether an address is a precompi …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.