mediumLogic errorEVM-Solidity
Thruster: Incorrect gas claiming logic in `ThrusterPoolDeployer`
- Payout
- $0
- Protocol
- Thruster
- Disclosed
- Mar 28, 2024
- Source
- code4rena
ThrusterPoolDeployer's claimGas() hard-codes address(0) as the contract whose Blast gas is claimed, instead of address(this). Because Blast.claimMaxGas requires the caller to be an authorized signer for the target contract, passing the zero address always reve …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-02-thruster-findings/issues/24
- https://github.com/code-423n4/2024-02-thruster-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.