Across V3: Cross Chain Action Vulnerability Disclosure
Across V3 is a cross chain optimistic bridge. Users deposit assets on an origin chain, and relayers compete to immediately fulfill the request on the destination chain. At a slower pace, the protocol uses UMA’s Optimistic Oracle to validate relays, and LP funds are used to refund the relayers. On January 28th, 2025, deadrose and I discovered a High Severity vulnerability in the protocol that would allow the full value of certain transactions to be stolen from users by malicious relayers. To u...
Across V3: Cross Chain Action Vulnerability Disclosure
Across V3 is a cross chain optimistic bridge. Users deposit assets on an origin chain, and relayers compete to immediately fulfill the request on the destination chain. At a slower pace, the protocol uses UMA’s Optimistic Oracle to validate relays, and LP funds are used to refund the relayers. On January 28th, 2025, deadrose and I discovered a High Severity vulnerability in the protocol that would allow the full value of certain transactions to be stolen from users by malicious relayers. To u...
The Napping Oracle
Perennial is a derivatives primitive that allows for the creation of two-sided markets that trade exposure to an underlying price feed. In other words, each epoch, Chainlink price feeds are used to determine the winning side of the market, and transfer assets from one side to the other. I saw they’d recently launched a bounty on Immunefi, and since there was a lull in Sherlock contests and I had a couple free days, I decided to take a look.How It WorksThe protocol runs in epochs called “versi...
The Napping Oracle
Perennial is a derivatives primitive that allows for the creation of two-sided markets that trade exposure to an underlying price feed. In other words, each epoch, Chainlink price feeds are used to determine the winning side of the market, and transfer assets from one side to the other. I saw they’d recently launched a bounty on Immunefi, and since there was a lull in Sherlock contests and I had a couple free days, I decided to take a look.How It WorksThe protocol runs in epochs called “versi...
