Lucene search
+L

1 matches found

Code423n4
Code423n4
added 2021/09/08 12:00 a.m.12 views

logic calls can steal tokens

Handle 0xito Vulnerability details Impact attacker can send a logic call that performs a token.approveattackerAddress, typeuint256.max using the submitLogicCall function. afterwards, they can steal all tokens from the bridge using token.safetransferfrombridge, attacker, amount. Proof of Concept...

6.9AI score
SaveExploits0
Rows per page
Query Builder