F-2025-0016·denial-of-service

Oversized packet in ORDERED IBC channel can cause channel closure

Fixedtypescriptwidgetrouter-api
TL;DR

Oversized payloads sent over ORDERED IBC channels could cause channel closure on the receiving chain, requiring channel re-establishment and potentially blocking transfers.

Severity
LOW
Impact
MEDIUM
Likelihood
LOW
Method
MManual review
CAT.
Complexity
MEDIUM
Exploitability
LOW
02Section · Description

Description

The integration did not enforce a maximum packet size before submission to ORDERED IBC channels. An oversized packet could be rejected on the destination chain, and on ORDERED channels a rejection causes channel closure, blocking subsequent traffic until the channel is re-established.

03Section · Recommendation

Recommendation

Validate packet size against the destination chain's limit before submission. If the payload exceeds the limit, reject the operation client-side rather than risking channel closure.

Initia: Resolved. Pashov Audit Group: Resolved.

Status
Fixed
Fix commit
de9d3602dc1a
Fix date
2025-06-23
F-2025-0016