highBridge exploitEVM-Solidity
Thanos L2 Native Token Bridge: L1 contract can evade aliasing, spoofing unowned L2 address
- Payout
- $0
- Protocol
- Thanos L2 Native Token Bridge
- Disclosed
- Sep 25, 2024
- Source
- sherlock
The Thanos L2 bridge, forked from the Optimism bedrock stack, lets an L1 contract send cross-domain messages without address aliasing, letting it impersonate an L2 contract it does not own. In OptimismPortal2, the deposit path aliases contract senders unless t …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.