mediumLogic errorCosmos-SDK
ZetaChain: Limited Voting Options Allow Ballot Creation Spam
- Payout
- $0
- Protocol
- ZetaChain
- Disclosed
- Sep 6, 2024
- Source
- code4rena
ZetaChain's observer voting handlers for inbound transactions, blame votes, and block-header submissions only permit the VoteType_SuccessObservation vote type, so an observer who submits a fabricated (non-existent) observation creates a ballot that honest obse …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-11-zetachain-findings/issues/536
- https://github.com/code-423n4/2023-11-zetachain-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.