mediumLogic errorSolana-Rust
ZetaChain Cross-Chain: An attacker can stuff a Solana Outbound transaction with multiple instructions to block it from finalizing
- Payout
- $0
- Protocol
- ZetaChain Cross-Chain
- Disclosed
- May 12, 2025
- Source
- sherlock
The ZetaChain Solana observer's outbound reconciliation logic asserts that every gateway transaction carries exactly one or two instructions and treats the last one as the gateway instruction. An attacker front-runs a legitimate increment_nonce outbound and re …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.