PT-2024-26393 · Unknown · Zksync Era

Hedgar2017 · Published 2024-05-27 · Updated 2024-05-28 · CVE-2024-35229

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ZKsync Era versions prior to 1.3.10

Description ZKsync Era is a layer 2 rollup that uses zero-knowledge proofs to scale Ethereum. A bug in the evaluation order of Yul function arguments is exposed by a specific pattern f(a(),b()); check if a executed last() in Yul. This issue has been fixed in version 1.3.10.

Recommendations For versions prior to 1.3.10, update and redeploy affected contracts to resolve the issue. As a temporary workaround, consider avoiding the use of the specific pattern f(a(),b()); check if a executed last() in Yul until the update is applied.

Exploit

Fix

Weakness Enumeration

CWE-696

Related Identifiers

CVE-2024-35229

GHSA-JF9W-7F5G-J95P

Affected Products

Zksync Era

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35229.json · Exploit
• https://osv.dev/vulnerability/CVE-2024-35229 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35229 · Security Note
• https://github.com/matter-labs/era-compiler-solidity/commit/46ce047b51576495779b9f67534207d8154eab79 · Note
• https://github.com/matter-labs/era-compiler-solidity/security/advisories/GHSA-jf9w-7f5g-j95p · Note
• https://t.me/cvenotify/81089 · Telegram Post