Skip to content
OpenAdvisories

Package · Go

github.com/mezo-org/mezod

1 known vulnerabilities.

1 result · Feed

  • High —

    Mezo: ERC-20 bridgeOut burn can be erased by a stale StateDB overwrite leading to full L1 bridge drain

    **Note: the fixed version of the validator client has been deployed for some time.** ### Impact Potential full drain of L1 bridge without changing bridged balance on Mezo. ## Brief/Intro A malicious user can steal all ERC-20 tokens locked in the L1 bridge by …