---
id: 1575
title: "Billion times emptiness"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2023/12/29/billion-times-emptiness/"
published_at: "2023-12-29T14:00:51Z"
tags: ["web3", "denial-of-service", "rust", "python", "vulnerability-disclosure", "blockchain", "ethereum", "abi"]
phying_url: "https://phying.com/item/1575"
lang: en
---

# Billion times emptiness

## Summary

Trail of Bits found a Billion Laughs-style flaw in Ethereum ABI parsers: zero-sized types can trigger memory-blowup DoS in eth_abi, ethabi, alloy-rs, and ethereumjs-abi; only the Python fix landed.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2023-12-29T14:00:51Z
- **Original:** https://blog.trailofbits.com/2023/12/29/billion-times-emptiness/
- **Phying News:** https://phying.com/item/1575