code-423n4 / 2024-03-zksync-findings

2 stars 1 forks source link

Logical Error in the unfreezeChain Function #24

Closed c4-bot-6 closed 7 months ago

c4-bot-6 commented 7 months ago

Lines of code

https://github.com/code-423n4/2024-03-zksync/blob/main/code/contracts/ethereum/contracts/state-transition/StateTransitionManager.sol#L166

Vulnerability details

Impact

The unfreezeChain function is intended to unfreeze a chain, but it actually calls the freezeDiamond function.

Proof of Concept

Tools Used

Recommended Mitigation Steps

Call the unfreezeDiamond function correctly.

Assessed type

Other

c4-judge commented 7 months ago

alex-ppg marked the issue as duplicate of #97

c4-judge commented 6 months ago

alex-ppg changed the severity to 2 (Med Risk)

c4-judge commented 6 months ago

alex-ppg marked the issue as partial-75