Skip to content
Request an audit

‹ Findings database

Send should revert if the gas limit has not been set for a destination chain (peer)

Crit/HighMetaZero Omnichain NFTs audit·Three Sigma·Omnichain RWA tokenisation·27th January, 20243S-MetaZero-H01

Description

send() allows users to send messages with 0 gas limit if the gasLimit mapping has not be seen for a certain peer. This will likely make the transaction revert on the destination chain, losing the funds.

POC here.

Recommendation

Revert if trying to send a message to _dstEid whose gas limit was not yet set.

Status

Addressed in 98f36e9.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests