EUVD-2021-2459

Malware in sbrugna...

PoS-CoPOR: Proof-Of-Stake Consensus Protocol with Native Onion Routing Providing Scalability and DoS-Resistance

Proof-of-Stake PoS consensus protocols often face a trade-off between performance and security. Protocols that pre-elect leaders for subsequent rounds are vulnerable to Denial-of-Service DoS attacks, which can disrupt the network and compromise liveness. In this work, we present PoS-CoPOR, a...

GHSA-6JQJ-F58P-MRW3 Denial of Service in TenderMint

Description Denial of Service Tendermint 0.33.0 and above allow block proposers to include signatures for the wrong block. This may happen naturally if you start a network, have it run for some time and restart it without changing the chainID. It is a misconfiguration to reuse chainIDs. Correct...

CVE-2020-15091: Improper Verification of Cryptographic Signature

TenderMint from version 0.33.0 and before version 0.33.6 allows block proposers to include signatures for the wrong block. This may happen naturally if you start a network, have it run for some time and restart it without changing chainID. A malicious block proposer even with a minimal amount of...