All reports
mediumLogic errorMove

Optimism: The LPP proposer may not be reimbursed their gas costs by the bonds at `MAX_GAME_DEPTH` because `step()` does not check if the LPP proposer is the one that called it

Payout
$0
Protocol
Optimism
Disclosed
Aug 16, 2024
Source
code4rena

Optimism's FaultDisputeGame.step() is permissionless and always credits its final-game bond to msg.sender instead of the actor who actually proposed the Large Preimage Proposal (LPP) whose data was consumed. Because submitting a maximal-size LPP costs roughly …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.