code-423n4 / 2024-06-thorchain-validation

1 stars 0 forks source link

The code assumes the genesis state is properly formatted. An attacker could provide malformed genesis state data, potentially leading to crashes or unexpected behavior. #248

Closed c4-bot-9 closed 4 months ago

c4-bot-9 commented 4 months ago

Lines of code

https://github.com/code-423n4/2024-06-thorchain/blob/e3fd3c75ff994dce50d6eb66eb290d467bd494f5/app/app.go#L322

Vulnerability details

Impact

Detailed description of the impact of this finding.

Proof of Concept

Provide direct links to all referenced code in GitHub. Add screenshots, logs, or any other relevant proof that illustrates the concept.

Tools Used

Recommended Mitigation Steps

Add input validation for the genesis state data, ensuring it's properly formatted and contains the expected data.

Assessed type

Invalid Validation