You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Validators who vote nil don't have their signature verified in comet. Consequently, they should not be extracted as byzantine validators when handling MsgConsumerMisbehaviour, find the complete bug report here.
Edit: It's also critical that we check that Misbehaviours comes from a valid consumer chain light client. Otherwise the above isn't sufficient to stop an attacker from introducing bogus validator signatures.
Problem
Validators who vote
nil
don't have their signature verified in comet. Consequently, they should not be extracted as byzantine validators when handlingMsgConsumerMisbehaviour
, find the complete bug report here.Edit: It's also critical that we check that
Misbehaviour
s comes from a valid consumer chain light client. Otherwise the above isn't sufficient to stop an attacker from introducing bogus validator signatures.Props to @insumity for finding this issue ❤️.
The text was updated successfully, but these errors were encountered: