Skip to content
Request an audit

‹ All findings

Anyone can frontrun a relayer interaction with the same arguments but a much higher/lower relayer fee

Crit/HighSingularity·Three Sigma · Private DeFi access · 26th February, 20243S-SG-H09

ReportSource

Description

The relayer fee used throughout the codebase is not enforced anywhere, such that it's possible to frontrun a legit transaction and set a much lower/higher relayer fee, harming the relayer/user.

Recommendation

There are several ways to tackle this issue:

  1. Assert that the relayer is the msg.sender.
  2. Place a cap on the relayer fee.
  3. The relayer gas fee could be part of the message that the user signs.

Status

Addressed in #99f0220, #02e5da2.