mediumBridge exploitEVM-Solidity
Maia DAO: `ArbitrumBranchBridgeAgent::_performFallbackCall` function does not refund users their excess native gas deposit
- Payout
- $0
- Protocol
- Maia DAO
- Disclosed
- Nov 29, 2023
- Source
- code4rena
In Maia DAO's cross-chain bridging architecture, retrying settlement calls sends native ETH gas tokens to the local branch bridge agent. On Arbitrum, if execution fails in `ArbitrumBranchBridgeAgent` after enabling fallback handling, `_performFallbackCall` is …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-09-maia-findings/issues/710
- https://github.com/code-423n4/2023-09-maia-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.