Libra's Move IR Compiler Vulnerability
Off-Chain (Private)
Audited on 09/09/2019
Rekt reported
Summary
break characters different from \n at the end of inline comments, malicious module publishers can deceive users that trust their apparent source code. This is especially important in the blockchain setting, where trust is replaced by auditability. A related vulnerability was previously found by our... team in the Solidity compiler audit on Nov 1st, 2018. The events timeline is as follows: August 6th: We disclosed the vulnerability to the Libra team, who acknowledged our notification. August 8th: The Libra team introduced a change to the line of code where we had pinpointed the vulnerability...
No issues
This project has no issues.
Contract (1)
| # | File Name |
|---|---|
| 1 | language/compiler/ir_to_bytecode/src/parser.rs |