6119 matches found
CVE-2024-44445
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
PT-2024-31155 · Unknown · Bafc Smart Contract
Name of the Vulnerable Software and Affected Versions: BSC Smart Contract 0x0506e571aba3dd4c9d71bed479a4e6d40d95c833 affected versions not specified Description: An issue was discovered in the BSC Smart Contract, allowing attackers to perform state manipulation attacks. This is achieved by...
CVE-2024-44445
This CVE-2024-44445 entry is rejected/not used and does not represent an active vulnerability.
OpenZeppelin Contracts for Cairo 安全漏洞
OpenZeppelin Contracts for Cairo is a secure smart contract development library open-sourced by OpenZeppelin. A security vulnerability exists in OpenZeppelin Contracts for Cairo versions prior to 0.15.1, which stems from an unauthorized ownership transfer mechanism that could result in an...
ZKsync Era 安全漏洞
ZKsync Era is an open source compiler from Matter Labs. A security vulnerability exists in versions of ZKsync Era prior to 1.5.3, which stems from LLVM mishandling of specific instructions during optimization, resulting in a numeric expansion error that affects contract execution on EraVM...
GHSA-75QH-GG76-P2W4 CWA-2023-004: Excessive number of function parameters in compiled Wasm
A specifically crafted Wasm file can cause the VM to consume excessive amounts of memory when compiling a contract. This can lead to high memory usage, slowdowns, potentially a crash and can poison a lock in the VM, preventing any further interaction with contracts. For more information, see...
CWA-2023-004: Excessive number of function parameters in compiled Wasm
A specifically crafted Wasm file can cause the VM to consume excessive amounts of memory when compiling a contract. This can lead to high memory usage, slowdowns, potentially a crash and can poison a lock in the VM, preventing any further interaction with contracts. For more information, see...
PT-2024-40919 · Cosmwasm · Cosmwasm
Name of the Vulnerable Software and Affected Versions: CosmWasm affected versions not specified Description: A specifically crafted Wasm file can cause the VM to consume excessive amounts of memory when compiling a contract, leading to high memory usage, slowdowns, potentially a crash, and can...
Improper Validation Of Non-deterministic Behavior
github.com/cosmwasm/wasmd is vulnerable to Improper validation of non-deterministic behavior. The vulnerability is due to the incorrect marking of the SmartContractState query as safe, which may cause non-deterministic outcomes across different nodes. Attackers can potentially exploit this...
GO-2022-0970 elrond-go MultiESDTNFTTransfer call on a SC address with missing function name in github.com/ElrondNetwork/elrond-go
elrond-go MultiESDTNFTTransfer call on a SC address with missing function name in github.com/ElrondNetwork/elrond-go...
GO-2022-0829 Cronos vulnerable to DoS through unintended Contract Selfdestruct in github.com/crypto-org-chain/cronos
Cronos vulnerable to DoS through unintended Contract Selfdestruct in github.com/crypto-org-chain/cronos...
GO-2022-0760 Ethermint vulnerable to DoS through unintended Contract Selfdestruct in github.com/crypto-org-chain/cronos
Ethermint vulnerable to DoS through unintended Contract Selfdestruct in github.com/crypto-org-chain/cronos...
cosmwasm-check (>=1.1.0-rc.1, <=1.3.4), cw-check-contract (1.0.1) +4 more potentially affected by unknown CVE via cosmwasm-vm (>=1.2.8, <=1.3.4)
cosmwasm-vm CARGO version =1.2.8, =1.1.0-rc.1, =0.5.3-2, =0.6.0-beta1, =0.17.1 Source cves: unknown CVE Source advisory: OSV:GHSA-RG2Q-2JH9-447Q...
Nexera DeFi Protocol Hacked: $1.8M Stolen in Major Smart Contract Exploit
Learn how a smart contract vulnerability led to the theft of $1.8 million from Nexera, a DeFi protocol.…...
GHSA-Q6HG-6M9X-5G9C Evmos vulnerable to exploit of smart contract account and vesting
Summary This advisory board aims to describe two vulnerabilities found in the Evmos codebase: - Authorization check on the fundVestingAccount: unauthorized spend of funds. Details Authorization check on the fundVestingAccount With the current implementation, a user can create a vesting account wi...
GO-2024-2974 Evmos vulnerable to exploit of smart contract account and vesting in github.com/evmos/evmos
Evmos vulnerable to exploit of smart contract account and vesting in github.com/evmos/evmos...
CVE-2024-39696 Evmos vulnerable to exploit of smart contract account and vesting
Evmos is a decentralized Ethereum Virtual Machine chain on the Cosmos Network. Prior to version 19.0.0, a user can create a vesting account with a 3rd party account EOA or contract as funder. Then, this user can create an authorization for the contract.CallerAddress, this is the authorization...
CVE-2024-39696 Evmos vulnerable to exploit of smart contract account and vesting
Evmos is a decentralized Ethereum Virtual Machine chain on the Cosmos Network. Prior to version 19.0.0, a user can create a vesting account with a 3rd party account EOA or contract as funder. Then, this user can create an authorization for the contract.CallerAddress, this is the authorization...