Assessment reports>Hyperlane Starknet>Low findings>Announcing a new storage location overwrites the previous storage location
Category: Coding Mistakes

Announcing a new storage location overwrites the previous storage location

Low Severity
Low Impact
Low Likelihood

Description

The validator creates signatures for the messages they endorse. These signatures should be relayed to relayers that are responsible to invoke the process function of the Mailbox. The validator-announcing contract helps this by allowing validators to announce their storage location (e.g., a S3 bucket) to relayers.

The validator can announce multiple storage locations in the Solidity implementation of the validator-announcing contract. In validator_announce.cairo, however, announcing a new storage location overwrites the existing storage location of the validator.

Impact

This divergence from the original implementation could lead to potential inconsistencies in validator announcements.

Recommendations

Consider implementing the validator-announcing contract in a way that announcing a new storage location does not overwrite the existing storage location.

Remediation

This issue has been acknowledged by Pragma, and a fix was implemented in commit 2e400899.

Zellic © 2025Back to top ↑