CVE-2026-24889 soroban-sdk has overflow in Bytes::slice, Vec::slice, GenRange::gen_range for u64

soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the Bytes::slice, Vec::slice, and Prng::genrange for u64 methods in the soroban-sdk in versions up to and including 25.0.1, 23.5.1, and 25.0.2. Contracts that pass user-controlled or computed range bounds to...

CVE-2026-24889

soroban-sdk is a Rust SDK for Soroban contracts. Arithmetic overflow can be triggered in the Bytes::slice, Vec::slice, and Prng::genrange for u64 methods in the soroban-sdk in versions up to and including 25.0.1, 23.5.1, and 25.0.2. Contracts that pass user-controlled or computed range bounds to...

CVE-2022-35961

OpenZeppelin Contracts is a library for secure smart contract development. The functions ECDSA.recover and ECDSA.tryRecover are vulnerable to a kind of signature malleability due to accepting EIP-2098 compact signatures in addition to the traditional 65 byte signature format. This is only an issu...

CredShields Joins Forces with Checkmarx to Bring Smart Contract Security to Enterprise AppSec Programs

Singapore, Singapore, 19th November 2025, CyberNewsWire...

EUVD-2018-5503

Malware in sbrugna...

EUVD-2018-5620

Malware in sbrugna...

EUVD-2018-5479

Malware in sbrugna...

EUVD-2018-5480

Malware in sbrugna...

EUVD-2018-5137

Malware in sbrugna...

EUVD-2018-5075

Malware in sbrugna...

EUVD-2018-5035

Malware in sbrugna...

EUVD-2018-5413

Malware in sbrugna...

EUVD-2018-5427

Malware in sbrugna...

EUVD-2023-1359

Malicious code in bioql PyPI...

EUVD-2022-6503

Malicious code in bioql PyPI...

EUVD-2024-40254

Malicious code in bioql PyPI...

EUVD-2025-21789

Malicious code in bioql PyPI...

Exploit for CVE-2025-4126

POC-CVE-2025-4126 smart contract reentrancy attack vulnerabili...

CVE-2025-54070

OpenZeppelin Contracts is a library for secure smart contract development. Starting in version 5.2.0 and prior to version 5.4.0, the lastIndexOfbytes,byte,uint256 function of the Bytes.sol library may access uninitialized memory when the following two conditions hold: 1 the provided buffer length...

OpDiffer: LLM-Assisted Opcode-Level Differential Testing of Ethereum Virtual Machine

As Ethereum continues to thrive, the Ethereum Virtual Machine EVM has become the cornerstone powering tens of millions of active smart contracts. Intuitively, security issues in EVMs could lead to inconsistent behaviors among smart contracts or even denial-of-service of the entire blockchain...