All reports
highLogic errorOther

SEDA Protocol: WASI imports can be exploited for unmetered execution or unbounded memory growth

Payout
$0
Protocol
SEDA Protocol
Disclosed
Mar 10, 2025
Source
sherlock

SEDA's Rust WASM VM (seda-wasm-vm) pulls WASI syscall objects directly from the WASI environment into its allowed-imports map without wiring them into the gas-metering path, so calls like fd_write and environ_get execute with no per-operation gas cost. A user …

Similar reports

  • No close matches yet.

References

This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.