Skip to content

Latest commit

 

History

History
37 lines (19 loc) · 782 Bytes

072.md

File metadata and controls

37 lines (19 loc) · 782 Bytes

Ambitious Amethyst Canary

Medium

Exploit visible nonces in incrementNonces function

Summary

In function incrementNonces If nonces can be observed externally (through events or state variables), an attacker may monitor and exploit this information for malicious purposes, such as guessing the next nonce.

Root Cause

In PredictDotLoan.sol::incrementNonces an attacker may monitor and exploit this information for malicious purposes, such as guessing the next nonce.

Internal pre-conditions

No response

External pre-conditions

No response

Attack Path

No response

Impact

No response

PoC

No response

Mitigation

Ensure that the nonces are not publicly readable or implement additional mechanisms to obfuscate nonce states.