mediumLogic errorEVM-Solidity
Optimism: Attacker can continuously create games for not yet safe l2 blocks to prevent the update of anchor state
- Payout
- $0
- Protocol
- Optimism
- Disclosed
- Aug 16, 2024
- Source
- code4rena
Optimism's dispute-game factory computes each game's unique identifier from only the game type, root claim, and extra data, omitting the parent block context. Because create() enforces UUID uniqueness, an attacker can pre-register a dispute game for the output …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2024-07-optimism-findings/issues/6
- https://github.com/code-423n4/2024-07-optimism-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.