You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The executor ignores the block gas limit during the dry running of transactions. It allows the attacker to submit a lot of transactions to dry run in one request, consuming the endpoint entirely.
Solution
Update the executor's dry run logic to respect the block gas limit.
And upgrade the dry_run endpoint to deserialize transactions one by one and check that cumulative gas less than block gas limit.
The text was updated successfully, but these errors were encountered:
Problem overview
The executor ignores the block gas limit during the dry running of transactions. It allows the attacker to submit a lot of transactions to dry run in one request, consuming the endpoint entirely.
Solution
dry_run
endpoint to deserialize transactions one by one and check that cumulative gas less than block gas limit.The text was updated successfully, but these errors were encountered: