Submitted by parashar
Frontrunning by malicious validator changing withdrawal credentials.
A malicious validator can frontrun depositEther transaction for its pubKey and deposit 1 ether for different withdrawal credential, thereby setting withdrawal credit before deposit of 32 ether by contract and thereby when 32 deposit ether are deposited, the withdrawal credential is also what was set before rather than the one being sent in depositEther transaction.
Set withdrawal credentials for validator by depositing 1 ether with desired withdrawal credentials, before adding it in Operator Registry.
FortisFortuna (Frax) commented:
0xean (judge) commented:
0xean (judge) commented:
Trust (warden) commented:
FortisFortuna (Frax) commented:
Trust (warden) commented:
FortisFortuna (Frax) confirmed and commented:
FortisFortuna (Frax) commented:
0xean (judge) commented:
FortisFortuna (Frax) commented:
0xean (judge) commented:
FortisFortuna (Frax) commented:
0xean (judge) commented:
FortisFortuna (Frax) commented:
0xean (judge) commented:
FortisFortuna (Frax) commented:
