CVE-2026-62162

The Hydra layer-two scalability solution for Cardano is vulnerable in versions prior to 2.1.0 due to a missing invariant in the Claim branch of hydra-plutus/validators/deposit.ak. The validator fails to require spending the Head state-token UTxO within the same transaction and lacks output constr...