An unbounded incoming amount overflows a fixed-width integer and panics end-of-block processing
- Severity
- Critical
- Class
- Consensus & liveness
- System
- Cross-chain bridge module
A deposit with an oversized amount overflows a signed integer during aggregation and halts the chain with no self-healing path.
Amounts arriving from the other side of a bridge were summed into a fixed-width signed integer without an upper bound. A large enough value overflowed during the end-of-block aggregation, and the overflow surfaced as an uncaught panic rather than a rejected deposit.
Anything that panics deterministically in end-of-block processing takes the whole network down with it.
Why it rated Critical
A single crafted deposit produces a deterministic halt that the chain can't recover from on its own.
The fix class
Bound incoming amounts on entry and use checked arithmetic in aggregation, rejecting the item instead of overflowing.
