highAccess controlSolana-Rust
DODO Cross-Chain DEX: Unauthorized Claim of Non-EVM Chain Refunds in `claimRefund` Function
- Payout
- $0
- Protocol
- DODO Cross-Chain DEX
- Disclosed
- Jun 9, 2025
- Source
- sherlock
DODO's omni-chain gateway contracts expose a claimRefund function that returns cross-chain refunds to their intended recipients. The authorization check determines the receiver by the stored walletAddress length: when the length is exactly 20 bytes (an EVM add …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.