763 matches found
EUVD-2026-62594
Authentication Bypass by Capture-replay in ZenHive mpp allows an unauthenticated remote client to obtain paid resources by resubmitting one settled on-chain transfer. MPP.Methods.EVM.verify/2 accepts a transaction-hash credential and matches a transfer purely on token, to and amount ERC-20 or to...
MAL-2026-5614 Malicious code in janus-erc20 (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 728f3d5af5a999be016a49283fff2c5cedc0c5df445d2f078f1f9817dde22334 On npm install, postinstall.js harvests installer secrets and POSTs them to 193.203.169.109:8443/c/janus-erc20 over HTTPS with TLS verification...
Improper Synchronization
Overview Affected versions of this package are vulnerable to Improper Synchronization through the bridgeOut precompile. An attacker can restore their ERC-20 token balance and allowance after a burn operation by exploiting stale state overwrites in the dual-context state management, enabling...
Mezo: ERC-20 bridgeOut burn can be erased by a stale StateDB overwrite leading to full L1 bridge drain
Note: the fixed version of the validator client has been deployed for some time. Impact Potential full drain of L1 bridge without changing bridged balance on Mezo. Brief/Intro A malicious user can steal all ERC-20 tokens locked in the L1 bridge by repeatedly calling the bridgeOut precompile from ...
EUVD-2018-4013
Malware in sbrugna...
EUVD-2018-4062
Malware in sbrugna...
EUVD-2018-2449
Malware in sbrugna...
EUVD-2018-4991
Malware in sbrugna...
EUVD-2018-4655
Malware in sbrugna...
EUVD-2018-4066
Malware in sbrugna...
EUVD-2018-2373
Malware in sbrugna...
EUVD-2018-4481
Malware in sbrugna...
EUVD-2021-20931
Malware in sbrugna...
EUVD-2018-5986
Malware in sbrugna...
EUVD-2018-11506
Malware in sbrugna...
EUVD-2018-2839
Malware in sbrugna...
EUVD-2018-3588
Malware in sbrugna...
EUVD-2018-3707
Malware in sbrugna...