Evmos transaction execution not accounting for all state transition after interaction with precompiles in github.com/evmos/evmos
Evmos transaction execution not accounting for all state transition after interaction with precompiles in github.com/evmos/evmos
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-32644US | critical9.1 | — | ||
Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there is a way to mint arbitrary token… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/evmos/evmos/blob/b196a522ba4951890b40992e9f97aa610f8b5f9c/x/evm/statedb/state_object.go#L53-L68WEB
- https://github.com/evmos/evmos/blob/b196a522ba4951890b40992e9f97aa610f8b5f9c/x/evm/statedb/statedb.go#L33-L55WEB
- https://github.com/evmos/evmos/blob/b196a522ba4951890b40992e9f97aa610f8b5f9c/x/evm/statedb/statedb.go#L460-L465WEB
- https://github.com/evmos/evmos/commit/08982b5ee726b97bc50eaf58d1914829648b6a5fFIX
- https://github.com/evmos/evmos/security/advisories/GHSA-3fp5-2xwh-fxm6ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2024-32644ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan