Assessment reports>ZetaChain>Threat Models>Message: CreateTSSVoter

Message: CreateTSSVoter

The CreateTSSVoter handler is responsible for adding new TSS entries via a voting mechanism. Only bonded validators are allowed to vote for a new TSS, and once all validators have voted, then the TSS is added. There are two issues with this handler. The first is that the isDuplicateSigner can be tricked into allowing two signatures from a node instead of one (see ). The second is that although only bonded validators can vote, the check to see if the vote passes is looking at every validator, including unbonded ones (see ).

Zellic © 2024Back to top ↑