Lucene search
+L

5 matches found

Github Security Blog
Github Security Blog
added 2026/08/28 4:25 p.m.17 views

Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Summary The per-entry percentages of a KDA asset's split royalties are validated by summing them into a uint32 accumulator and checking the sum against HundredPercent 10000, with no upper bound on each individual entry. Two split entries whose percentages sum to just over 2^32 wrap around below...

9.6CVSS6AI score0.00386EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder