aligned_layer

aligned_layer copied to clipboard

If you don't have the local env, it suggests running make create-env which doesn't exist, we should have a local env

MauroToscano

MauroToscano

## Overview: The [`fetch_batch_data_pointer`](https://github.com/yetanotherco/aligned_layer/blob/staging/explorer/lib/explorer_web/live/utils.ex#L182) function in the [`explorer`](explorer/lib/explorer_web/live/utils.ex) is vulnerable to an OOM attack. The function reads the entire response body without any limitation, which can lead to an OOM...

PatStiles

# Description It is just changing the batcher configuration

JuArce

We have constants scattered along many files. It will be useful and make the code much cleaner if we had constants in one file and read them from there. If...

entropidelic

Upon initialization the batcher currently fetches the last block from an rpc node by invoking the `getBlockNumber` JSON-RPC call. Ideally we should register the last submitted batch block and reference...

PatStiles

## Overview: [`AlignedLayerServiceManager`](https://github.com/yetanotherco/aligned_layer/blob/staging/contracts/src/core/AlignedLayerServiceManager.sol#L43) contract initialize step can be frontrun in some cases. ## Detailed Behavior: The [`AlignedLayerServiceManager`](https://github.com/yetanotherco/aligned_layer/blob/staging/contracts/src/core/AlignedLayerServiceManager.sol#L43) contract does not implement a way to prevent frontrunning during the initialization step....

PatStiles

## Overview: The Docker files used to build the project images in: `explorer/Dockerfiles` `operator/docker/operator.Dockerfile` do not have a `HEALTHCHECK` directive. ## Mitigation: Use the `HEALTHCHECK` directive in the Dockerfiles to...

PatStiles

## Overview: The Docker files don't use the `USER` directive to specify the user that the image should run as. By default, Docker runs the image as the root user....

PatStiles

fix(docker): Docker files update instructions are used alone

1

## Overview: The Dockerfiles used to build the project images update the package manager cache without installing any packages in the same layer and delete the apt-get lists after. ##...

PatStiles