Skip to content
This repository has been archived by the owner on Apr 15, 2024. It is now read-only.

Redundant EthAdress in ValsetConfirm #559

Open
dalmirel opened this issue Oct 25, 2023 · 0 comments
Open

Redundant EthAdress in ValsetConfirm #559

dalmirel opened this issue Oct 25, 2023 · 0 comments
Labels

Comments

@dalmirel
Copy link

Involved artifacts

Description

During the analysis of update validator set flow, it was noticed that EthAddress was stored two times for one entry when:

  • when orchestrator is placing the ValsetConfirm for attestation in the qgbDHT store
  • when relayer is placing the ValsetConfirms in the SignatureStore

Problem Scenarios

The suggestions mentioned earlier can help save memory if the EthAddress field is not utilized in ValsetConfirm.

Recommendation

We suggest simplifying the stored values if possible and reconstructing the ValsetConfirms if needed, upon reading the values from the store. In our analysis throughout this project, we did not identify any instances where theValsetConfirm's EthAddress field was used.
However, it's important to note that a detailed audit of the relayer and orchestrator code has not been conducted, so we cannot definitively assert this to be the case.

@rach-id rach-id added the audit label Oct 25, 2023
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

No branches or pull requests

2 participants