POPA Reconauditing L1’s validator-penalty precompile:
auditing L1’s validator-penalty precompile: found Its ABI accepted a 256-bit view Consensus casted views with 64 bits That boundary looked ok until I asked what happened if a valid input didn't fit The answer was not a revert Flaw The precompile decoded the attacker-controlled value correctly and then called `view.as_u64() In the pinned Rust library, values above `u64::MAX do not return an error. They PANIC. So one ABI-valid input could escape the EVM’s normal failure path. Impact A funded account could submit the transaction. If an honest leader selected it, proposal assembly panicked…
The excerpt is quoted from a public Telegram channel, which owns its text.