returndata-bomb

2 articles
Sort: New Top Best
clear filter
0 8/10
RAI
vulnerability

A returndata bomb vulnerability in RAI's LiquidationEngine allows an attacker to deploy a malicious whitelisted savior contract that reverts with massive data, exhausting gas during the catch clause and rendering positions unliquidatable—causing protocol bad debt. The researcher disputes Immunefi's downgrade from Medium to None severity, arguing governance whitelisting cannot detect this emergent EVM interaction vulnerability.

RAI Reflexer Finance Immunefi LiquidationEngine Safe Saviours geb repository
trust-security.xyz · Trust Security · 4 hours ago · details
0
vulnerability

Two high-severity Denial of Service vulnerabilities discovered in Stargate, LayerZero's liquidity layer: Bug #1 exploits a Solidity quirk where try/catch statements revert when calling non-contract addresses, allowing attackers to permanently freeze message channels by targeting non-existent contracts with swap payloads; Bug #2 abuses SSTORE gas costs to create payloads exceeding the 175k gas budget allocated for cross-chain message delivery, causing out-of-gas reverts that block the entire bridge channel.

Stargate LayerZero ULNv1 MPTValidator Immunefi Router Bridge sgReceive() lzReceive()
trust-security.xyz · Trust Security · 4 hours ago · details