omgnetwork / plasma-cash

122 stars 34 forks source link

Potential attack: Operator halts publishing blocks after deposit #93

Open codyborn opened 6 years ago

codyborn commented 6 years ago

A user may not exit until their token gets included in a block. If the user calls deposit but the operator fails to generate future blocks, then the user's funds may be locked in the contract.

boolafish commented 6 years ago

I think you are right. Thanks for reporting this issue!