Certik, Ethereum Bridge, Preliminary Report (v1), Severity: Medium [Priority 4]

[tcharchian]

• GEB-04 | Incorrect Signing Threshold in checkThresholdAndAggregate()
• GEB-05 | Native Denom Auto-Detection Can Be Misconfigured in community-sale Contract
• GEB-13 | Aggregation of BLS Partial Signature Does Not Eliminate Duplicates
• GEB-14 | User-Controlled RequestId Allows Front-Run Poisoning of Threshold Signing
• GEB-15 | Cross-Chain Address Collision
• GEB-16 | Bridge BLS Signatures Are Not Bound to Destination Contract
• GEB-17 | Dealer Validation Majority Is Too Weak for Safe Key Recovery
• GEB-35 | Secret Shares Not Using Consensus ValidDealers
• GEB-36 | Authority Mismatch In MigrateAllWrappedTokenContracts()
• GEB-55 | BLS Genesis Export/Import Drops In-flight DKG and Signing state

[GLiberman]

GEB-05, GEB-15, GEB-36

#814