Skip to content
Billion times emptiness
blog.trailofbits.com | blog | #web3 | #denial-of-service | #rust | #python | #vulnerability-disclosure | #blockchain | #ethereum | #abi
Summary
Trail of Bits found a Billion Laughs-style flaw in Ethereum ABI parsers: zero-sized types can trigger memory-blowup DoS in eth_abi, ethabi, alloy-rs, and ethereumjs-abi; only the Python fix landed.
- Published
- Collected