mediumLogic errorEVM-Solidity
Phala Network: An attacker can bloat the Pink runtime storage with zero costs
- Payout
- $0
- Protocol
- Phala Network
- Disclosed
- Apr 11, 2024
- Source
- code4rena
Phala's Pink runtime sets its Existential Deposit to a single base unit despite one PHA being divisible into 1e12 base units. Because an account stays alive with just 1e-12 PHA, an attacker can mass-create dust accounts at near-zero cost to bloat runtime stora …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-03-phala-network-findings/issues/49
- https://github.com/code-423n4/2024-03-phala-network-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.