highFront-running / MEVCosmos-SDK
SEDA Protocol: Attacker can front-run Withdraw and steal the withdrawal
- Payout
- $0
- Protocol
- SEDA Protocol
- Disclosed
- Mar 10, 2025
- Source
- sherlock
The SEDA Protocol staking contract's Withdraw message pays out the withdrawn token balance to whatever address submits the message (info.sender) rather than to the staker who originally deposited. Because no sender authentication is performed and the message i …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.