mediumLogic errorEVM-Solidity
Elfi: Users can gas grief or completely block keepers from executing orders
- Payout
- $0
- Protocol
- Elfi
- Disclosed
- Jun 20, 2024
- Source
- sherlock
In the Elfi perp protocol, excess execution fees are refunded to order accounts via an infinite-gas ether transfer executed inside the same keeper-called function that performs the core order operation. Because the refund target is a user-controlled address, a …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.