hard20 pts · first answer countssmart-contract-securityevm-fundamentals
Relayer forwards too little gas
A meta-transaction forwarder marks the user's nonce as used, then calls the target with the requested gas. A malicious relayer makes the inner call fail while the outer call succeeds, burning the user's request. How?