CVE-2026-86840

Bifrost 's vtoken-minting and slpx pallets contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered channel_id when minting tokens without verification that the caller is authorized to mint on behalf of that channel. An...