Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Soroban RPC does not validate the bucket list hash when ingesting ledger entries from history archives #144

Closed
tamirms opened this issue Apr 17, 2024 · 0 comments · Fixed by #145
Closed

Soroban RPC does not validate the bucket list hash when ingesting ledger entries from history archives #144

tamirms opened this issue Apr 17, 2024 · 0 comments · Fixed by #145
Assignees
@tamirms
Labels
bug Something isn't working rpc-sdk-scrum
Milestone
platform sprint 45

Comments

@tamirms
Copy link
Contributor

tamirms commented Apr 17, 2024

If Soroban RPC uses a corrupted history archive endpoint it is possible for Soroban RPC to ingest invalid data. Horizon does not suffer from this vulnerability so we should employ the same solution in Soroban RPC.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@tamirms tamirms

Labels
bug Something isn't working rpc-sdk-scrum
Projects
Platform Scrum
Status: Done
Milestone
platform sprint 45
2 participants
@tamirms @mollykarcher