babylonlabs-io/finality-provider · Security
Finality Provider vulnerable to anti-slashing bypassing due to misconfiguration
- GHSA ID
- GHSA-4jmp-x7mh-rgmr
- Severity
- high
- Published
- Updated
- CVSS v4
- 8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
Description
Summary
The anti-slashing is not effective if the attacker can access EOTS manager endpoints.
Impact
If the EOTS manager endpoints are open to public without HMAC protection, the attacker can manually cause slashing of the finality provider through the RPC endpoints.
Report credits go to: x.com/RebelsRunways
CWEs
- CWE-285 · Improper Authorization