BlockChainConstruction

Prefacio En este artículo, presentamos principalmente varios aspectos de la auditoría de cadenas públicas que merecen atención. Para los auditores de seguridad y los desarrolladores de cadenas públicas, este es un proyecto digno de referencia y reflexión. Arquitectura Antes de presentar la...

llm-council-vapt

LLM Council — VAPT Finding Validation クライアントに報告される前に、ペネトレーションテストの検出結果を検証するブラインドピアレビューパイプライン。独立したエキスパートレンズが検出結果を評価し、互いにブラインドレビューを行い、議長が一つにまとめた検証済みの判定を合成します — 報告に値するか、深刻度は適切に調整されているか？ 実行方法は2つあります：...

CVE-2026-77642

A flaw was found in Tor. This out-of-bounds write vulnerability occurs when Tor parses a consensus or detached signature with an unexpected signature digest type. A remote attacker could exploit this to cause a denial of service for Tor directory authorities, potentially disrupting the Tor networ...

EUVD-2026-63665

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

Linux Distros Unpatched Vulnerability : CVE-2026-77642

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for...

CVE-2026-77642

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

DEBIAN-CVE-2026-77642

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

CVE-2026-77642

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

CVE-2026-77642

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

CVE-2026-77642

tor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached signature with unexpected signature digest type. Impact is minor for most Tor roles, but potentially major for directory authorities. This is TROVE-2026-019...

CVE-2026-52738

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a consensus-valid block containing a long chain of transparent self-spends to one address can permanently halt Zebra nodes. In zebra-state/src/service/finalizedstate/zebradb/transparent.rs, the finalized-state writer originally appli...

CVE-2026-52735

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts containing a disabled opcode followed by signature opcodes. In zebra-script/src/lib.rs, p2shinputsigopcount used the...

CVE-2026-52738 ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a consensus-valid block containing a long chain of transparent self-spends to one address can permanently halt Zebra nodes. In zebra-state/src/service/finalizedstate/zebradb/transparent.rs, the finalized-state writer originally appli...

CVE-2026-52738 ZEBRA: Finalized address balance credit-first overflow on consensus-valid blocks

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, a consensus-valid block containing a long chain of transparent self-spends to one address can permanently halt Zebra nodes. In zebra-state/src/service/finalizedstate/zebradb/transparent.rs, the finalized-state writer originally appli...

CVE-2026-52738

Zebra (a Zcash node written in Rust) versions up to v4.4.1 are vulnerable to a persistent chain halt . The finalized-state writer in transparent.rs applies all credits before debits within a block, so a consensus-valid block with a long chain of transparent self-spends to one address can push the...

CVE-2026-52735 ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts containing a disabled opcode followed by signature opcodes. In zebra-script/src/lib.rs, p2shinputsigopcount used the...

CVE-2026-52735 ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

ZEBRA is a Zcash node written entirely in Rust. Prior to 4.5.0, Zebra can accept a block that zcashd rejects because the P2SH signature-operation counter undercounts redeem scripts containing a disabled opcode followed by signature opcodes. In zebra-script/src/lib.rs, p2shinputsigopcount used the...

CVE-2026-52735

Zebra (a Rust-based Zcash node) used a pure-Rust P2SH sigop counter that short-circuited on disabled opcodes like OP_CODESEPARATOR, undercounting sigops compared to zcashd. An attacker without mining power could trigger a chain split by broadcasting P2SH spends with malicious redeem scripts. Fixe...

CVE-2026-58262

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signature verification counts the unused padding bits of the PubKeysBitmap toward the two-thirds validator quorum. These padding bits do not correspond to any validator and are ignored by the actual BLS...

CVE-2026-58262 Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorum

Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.20, header signature verification counts the unused padding bits of the PubKeysBitmap toward the two-thirds validator quorum. These padding bits do not correspond to any validator and are ignored by the actual BLS...