Hex/mpp

Missing gas_limit validation in mpp Tempo fee-payer enables wallet drain

Modified: 9/8/2026

Unbounded access list in mpp Tempo fee-payer inflates gas cost per payment

Modified: 9/8/2026

Unbounded max_fee_per_gas in mpp Tempo fee-payer enables single-request wallet drain

Modified: 9/8/2026

On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay

Modified: 9/8/2026

Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay

Modified: 9/8/2026

Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain

Modified: 9/8/2026

Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race

Modified: 9/8/2026

Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegation

Modified: 9/8/2026

Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioning

Modified: 9/8/2026

mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayed

Modified: 9/22/2026

mpp Tempo keys its pre-broadcast dedup reserve on the caller-supplied transaction encoding, so a re-encoded signed transaction reserves a second slot

Modified: 9/16/2026

mpp writes Payment-Receipt and Cache-Control before the wrapped application runs, letting a consumer's own Cache-Control expose paid responses to shared caches

Modified: 9/16/2026

Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free

Modified: 9/22/2026

mpp vulnerable to Gas Draining with access list

Modified: 9/25/2026

mpp vulnerable to Gas Draining with low gas limit

Modified: 9/25/2026

mpp vulnerable to Gas Draining with no limit

Modified: 9/25/2026