mediumLogic errorEVM-Solidity
Elfi: Missing compensation for the ````21,000```` intrinsic gas cost
- Payout
- $0
- Protocol
- Elfi
- Disclosed
- Jun 20, 2024
- Source
- sherlock
Elfi's OrderFacet.executeOrder snapshots the remaining gas with gasleft() only at the first line of the facet, after the 21,000 intrinsic gas charge and additional calldata and diamond-fallback lookup overhead have already been consumed. Because GasProcess.pro …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.