All reports
mediumLogic errorEVM-Solidity

Elfi: Users can gas grief or completely block keepers from executing orders

Payout
$0
Protocol
Elfi
Disclosed
Jun 20, 2024
Source
sherlock

In the Elfi perp protocol, excess execution fees are refunded to order accounts via an infinite-gas ether transfer executed inside the same keeper-called function that performs the core order operation. Because the refund target is a user-controlled address, a …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.