2 matches found
Babylon Finality Provider `MsgCommitPubRandList` replay attack
Summary A high vulnerability exists in the Babylon protocol's x/finality module due to a lack of domain separation in signed messages, combined with insufficient validation in the MsgCommitPubRandList handler. Specifically, the handler does not enforce that the submitted Commitment field is 32...
7.2AI score
SaveExploits0References4Affected Software1
20