Skip to content
This repository has been archived by the owner on Oct 8, 2023. It is now read-only.

rvierdiiev - Bug #175 from previous sherlock audit is not fixed #43

Closed
sherlock-admin opened this issue Apr 7, 2023 · 0 comments
Closed
Labels
Non-Reward This issue will not receive a payout

Comments

@sherlock-admin
Copy link
Contributor

sherlock-admin commented Apr 7, 2023

rvierdiiev

medium

Bug #175 from previous sherlock audit is not fixed

Summary

Bug 175 from previous sherlock audit was not fixed. There is no any info in the readme that this issue is known or should not be considered, so i believe it's valid finding.

Vulnerability Detail

sherlock-audit/2023-01-optimism-judging#175 bug is talking about LES (Light Ethereum Subprotocol) doesn't forward the transaction to the sequencer.
After review of previous findings i have noticed, that this issue was not fixed.
https://github.com/sherlock-audit/2023-03-optimism/blob/main/op-geth/les/api_backend.go#L196-L198

func (b *LesApiBackend) SendTx(ctx context.Context, signedTx *types.Transaction) error {
	return b.eth.txPool.Add(ctx, signedTx)
}

This function still doesn't send transaction to sequencer.

Impact

Transaction isn't sent to the sequence.

Code Snippet

https://github.com/sherlock-audit/2023-03-optimism/blob/main/op-geth/les/api_backend.go#L196-L198

Tool used

Manual Review

Recommendation

Fix that previous finding.

Duplicate of #101

@github-actions github-actions bot added Medium A valid Medium severity issue Duplicate A valid issue that is a duplicate of an issue with `Has Duplicates` label labels Apr 10, 2023
@sherlock-admin sherlock-admin added Non-Reward This issue will not receive a payout and removed Medium A valid Medium severity issue Duplicate A valid issue that is a duplicate of an issue with `Has Duplicates` label labels Apr 23, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Non-Reward This issue will not receive a payout
Projects
None yet
Development

No branches or pull requests

1 participant