highLogic errorCosmos-SDK
SEDA Protocol: A request poster can set gas_price to 1 and pay minimal fees for a lot of gas and drain validators' resources
- Payout
- $0
- Protocol
- SEDA Protocol
- Disclosed
- Mar 10, 2025
- Source
- sherlock
SEDA Protocol's SEDA Core contract prices each posted data request strictly as the product of total gas limit and gas_price while imposing no minimum on gas_price. An attacker can therefore post a request with gas_price set to 1, a single replication factor, a …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.