Race condition in faucet when using starport
该报告还没有中文解读。
原文摘录
摘自原文(2246 字符中的一小部分)
Hi team, I and Aditya sent this bug over email on Wed, 29 Dec, 17:45 IST. Later we noticed that security reports are accepted via the HackerOne program. So, I am sending a copy of the bug report here.
原文中的代码
accounts:
- name: alice
coins: ["0token", "200000000stake"]
- name: bob
coins: ["500token", "100000000stake"]
validator:
name: alice
staked: "100000000stake"
client:
openapi:
path: "docs/static/openapi.yml"
vuex:
path: "vue/src/store"
faucet:
name: bob
coins: …默认不展示报告全文。以上为简短摘录,完整复现过程请阅读原文。版权归研究员与 Cosmos 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @cyberboy · 版权归作者与 Cosmos 所有