mediumLogic errorEVM-Solidity
zkSync: Discrepancy in Default Account Behavior
- Payout
- $0
- Protocol
- zkSync
- Disclosed
- Feb 29, 2024
- Source
- code4rena
zkSync's DefaultAccount contract is designed to be indistinguishable from an EOA to wallets and calling contracts, but its fallback contains an assert that reverts whenever msg.sender is the bootloader. That assert becomes reachable when a custom account deleg …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-10-zksync-findings/issues/168
- https://github.com/code-423n4/2023-10-zksync-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.