The new broker pallet, responsible for handling the Coretime procurement logic, had a vulnerability that allowed users to assign Coretime they no longer owned. This is, obviously, quite problematic. The issue is described in more detail here: https://github.com/paritytech/polkadot-sdk/pull/2811 This is a small tip request for finding reporting and fixing the issue.

The proposal from Código Brazuca and Polkadot Brazil aims to establish an 8 to 10-month Tech Academy focused on Polkadot technology, with the goal of expanding and adopting the Polkadot ecosystem in Brazil. The academy plans to offer a high-quality educational curriculum covering basic to advanced concepts to train 100 developers, using both online and in-person modalities.

Research.

Pk-Sk generation.

Plan & Documentation.

Key Storage.

Threshold-FHE.

amount

beneficiary

- Problem Statement: Vulnerability in the new broker pallet allowing users to assign Coretime they no longer own, targeted at developers and technical users.
- Significance: Critical security flaw impacting Coretime procurement logic.
- Proposed Solution: Small tip request for identifying and resolving the vulnerability.
- Expected Outcomes: Improved security and integrity of Coretime transactions.

#568 Finding and fixing a vulnerability in broker-pallet

No Active Proposals