Skip to content

Latest commit

 

History

History
44 lines (24 loc) · 832 Bytes

File metadata and controls

44 lines (24 loc) · 832 Bytes

Smooth Opal Millipede

Medium

Slash lack of 72h grace period.

Summary

Upon being slashed the accused has a 72h grace period before they may be slashed again. Refered from: https://whitepaper.ethos.network/ethos-mechanisms/vouch https://whitepaper.ethos.network/ethos-mechanisms/slash

But for now there is not time restriction in EthosVouch.slash(): https://github.com/sherlock-audit/2024-11-ethos-network-ii/blob/main/ethos/packages/contracts/contracts/EthosVouch.sol#L520-L555

Root Cause

No response

Internal pre-conditions

No response

External pre-conditions

No response

Attack Path

No response

Impact

This violates the protocol design and allows the slasher to continuously withdraw the funds of vouch without a break.

PoC

No response

Mitigation

No response