3 ms·
> So someone realized that they could send an cross-chain message directly to the EthCrossChainData contract. > By sending this cross-chain message, the user c
by seanwilson 5y ago
> So someone realized that they could send an cross-chain message directly to the EthCrossChainData contract.
> By sending this cross-chain message, the user could trick the EthCrossChainManager into calling the EthCrossChainData contract, passing the onlyOwner check. Now the user just had to craft the right data to be able to trigger the function that changes the public keys.
Could this bug have been avoided by extra safety features in the language used to write the contracts like a better type system? Or the code wasn't using all the language features it could? I found the cause of the bug hard to understand to be honest.