aligned_layer icon indicating copy to clipboard operation
aligned_layer copied to clipboard

fix: BatcherPaymentService - Non-Atomic Contract Deployment
and
Initialization
Forge
Script Can
Be
Front
Run

Open NicolasRampoldi opened this issue 1 year ago • 0 comments

Description

  • The BatcherPaymentService deployment
script
using
Forge
performs
a
two‐step
deployment
and
initialization
process. Since
these
transactions
are
broadcast
individually,
there
is
a
risk
that
a
malicious
actor
could
front‐run
the
third
transaction
to claim
control
of
the
newly
deployed
contract.
  • This issue was found by DueDilgence (Consensys).

NicolasRampoldi avatar Aug 21 '24 19:08 NicolasRampoldi