highLogic errorEVM-Solidity
MorphL2: Attacker can freeze chain and steal challenge deposits using fake `prevStateRoot`
- Payout
- $0
- Protocol
- MorphL2
- Disclosed
- Sep 23, 2024
- Source
- sherlock
Morph L2's Rollup.sol only validates that a committed batch's prevStateRoot matches the previous batch's postStateRoot inside finalizeBatch(), not at commit time. A malicious sequencer can therefore commit a batch that performs a valid state transition rooted …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.