Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
added 2026/09/22 8:34 p.m.6 views

mppx: Gas Draining with access list

Details When the server acts as the feepayer, mppx 0.6.27 copies the client-supplied EIP-2930 access list verbatim into the cosigned fee-payer transaction. The TypeScript SDK's fee-payer cosigning path accepts any accesslist the client includes in the 0x78 FeePayerEnvelope without inspecting its...

6.9CVSS5.8AI score0.00524EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder