Jubjubs - zk-provable Devconnect mementos

Devcon Improvement Proposals (DIPs)
4

I saw you mention using a MUD engine to build functionality. Please make sure you are familiar with important vulnerabilities in previous versions of MUD and use the latest version.

we discovered a critical vulnerability in MUD v2 alpha versions earlier than 2.0.0-next.8 that would allow an attacker to gain root access to the World by registering the World contract itself as a system and then exploiting the fact that the World treats incoming calls where the caller is its own address as root calls.

3 Likes