Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2026/09/22 8:34 p.m.5 views

mppx: Gas Draining with padding

Details When the server acts as the feepayer, mppx 0.6.27 validates calldata using viem's decodeFunctionData, which is lenient about trailing bytes. The FeePayerPolicy caps gaslimit ≤ 2 M and maxfeepergas ≤ 100 Gwei but does not check calldata length. Tempo uses legacy calldata gas pricing: 16 ga...

6.9CVSS5.8AI score0.00524EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder