highLogic errorCosmos-SDK
Nibiru: Unlimited Nibi could be minted because evm and bank balance are not synced when staking
- Payout
- $0
- Protocol
- Nibiru
- Disclosed
- Feb 24, 2025
- Source
- code4rena
Nibiru's EVM/cosmos-sdk bridge keeps an EVM StateDB (BalanceWei per account) in sync with the bank module's coin balances through NibiruBankKeeper.SyncStateDBWithAccount. That sync is only wired into some bank write paths (SendCoins, MintCoins, BurnCoins) and …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-11-nibiru-findings/issues/26
- https://github.com/code-423n4/2024-11-nibiru-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.