highLogic errorCosmos-SDK
SEDA Protocol: `call_result_write` import can be exploited for unmetered execution and memory growth
- Payout
- $0
- Protocol
- SEDA Protocol
- Disclosed
- Mar 10, 2025
- Source
- sherlock
SEDA's WASM VM exposes a core Tally import, call_result_write, that omits the apply_gas_cost metering call applied by all other core imports. Because execution is unmetered, an attacker can deploy a malicious Tally program via StoreOracleProgram and submit a d …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.