Launch Week Day 1: Announcing Security Design Review
UNKNOWN PyPI

Storage corruption due to variables overwritten by re-entrancy locks

GHSA-7f92-rr6w-cq64

Published ยท Modified

Description

Background

When attempting to use the v0.2.14 release, @pandadefi discovered an issue using the @nonreentrant decorator.

Impact

Reentrancy protection storage slots get allocated to the same slots as storage variables, leading to the corruption of storage variables when using the @nonreentrant decorator.

Patches

This issue was fixed in v0.2.15 in #2391, #2379

Workarounds

Don't use the @nonreentrant decorator in these versions.

Ready to move

Start Securing

Free, no credit card | First findings in minutes