evmos allows transferring unvested tokens after delegations in github.com/evmos/evmos
evmos allows transferring unvested tokens after delegations in github.com/evmos/evmos
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-37159US | medium6.5 | — | ||
Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vu… | ||||
| CVE-2024-37158US | high8.1 | — | ||
Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Preliminary checks on actions computed by the clawback vesting accounts are performed in the ante handler. Ev… | ||||
| CVE-2024-32873US | medium4.3 | — | ||
Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. The spendable balance is not updated properly when delegating vested tokens. The issue allows a clawback vest… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/evmos/evmos/commit/b2a09ca66613d8b04decd3f2dcba8e1e77709dcbFIX
- https://github.com/evmos/evmos/security/advisories/GHSA-pxv8-qhrh-jc7vADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2024-32873ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2024-37158WEB
- https://nvd.nist.gov/vuln/detail/CVE-2024-37159WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan