PT-2023-28348 · Hydra · Hydra
Jmhrpr
·
Published
2023-10-04
·
Updated
2023-10-10
·
CVE-2023-42448
CVSS v3.1
8.1
High
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Hydra versions prior to 0.13.0
Description
Hydra is the layer-two scalability solution for Cardano. The issue arises because the contestation period in the datum of the UTxO at the head validator must stay unchanged as the state progresses from Open to Closed, but no such check appears to be performed in the
checkClose function of the head validator. This would allow a malicious participant to modify the contestation deadline of the head to either allow them to fanout the head without giving another participant the chance to contest, or prevent any participant from ever redistributing the funds locked in the head via a fan-out.Recommendations
For versions prior to 0.13.0, update to version 0.13.0 to resolve the issue. As a temporary workaround, consider restricting access to the
checkClose function of the head validator until the patch is applied. Additionally, avoid modifying the contestation deadline of the head to prevent potential exploitation.Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Hydra