Get the latest tech news
Sei pays out $2M bug bounty
In April 2024, I found and reported two critical bugs to Sei Network concerning their layer-1 blockchain. One of these issues impacted the chain’s availability, and the other its integrity. The Sei Foundation awarded me $75,000 and $2,000,000 respectively for these reports.
When browsing through the fix commit and subsequent changes made as a result of the previous issue, I noticed some interesting code at the junction of Sei’s Cosmos and Geth modules. The EVM uses 256 bit registers that we can set freely as opcode arguments but the state transition handling code for CALL and CREATE treat these as unsigned integers, so they are always positive. While the token theft mechanism is perfectly valid according to the chain’s code, certain types of faults like committing invalid blocks will be rejected by honest full nodes.
Or read this on Hacker News