Other vulnerabilities exist in Ethermint

When verifying the signature of transactions on different chains, only the ChainIDEpoch field is used to indicate the chain to which the transaction belongs, so for two chains with different ChainIDs but the same ChainIDEpoch, the signed transaction can be replayed on the other chain...

Cross-Chain Transaction Replay Attack

github.com/cosmos/ethermint is vulnerable to Cross-Chain Transaction Replay Attack. The vulnerability exists when transactions created on one chain could be replayed on the other chain due to ethermint using the same chainIDEpoch and signature schemes as ethereum which has the same vulnerability...

CVE-2021-25835

CVE-2021-25835 : Cosmos Network Ethermint

CVE-2021-25835: Authentication Bypass by Capture-replay

Cosmos Network Ethermint = v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module. Since ethermint uses the same chainIDEpoch and signature schemes with ethereum for compatibility, a verified signature in ethereum is still valid in ethermint with the same msg conte...