Lucene search
K

4 matches found

Veracode
Veracode
added 2023/07/20 9:16 a.m.10 views

X/crisis Does Not Charge ConstantFee

github.com/cosmos/cosmos-sdk is vulnerable to inconstant Fee. If a transaction is sent to the x/crisis module to check an invariant, the ConstantFee parameter of the chain is NOT charged. All versions of the x/crisis module are affected on all versions of the Cosmos SDK...

6.8AI score
Exploits0
OSV
OSV
added 2023/07/06 8:13 p.m.6 views

GO-2023-1881 The x/crisis package does not charge ConstantFee in github.com/cosmos/cosmos-sdk

If a transaction is sent to the x/crisis module to check an invariant, the ConstantFee parameter of the chain is not charged. No patch will be released, as the package is planned to be deprecated and replaced...

7AI score
Exploits0References2
OSV
OSV
added 2023/06/30 10:13 p.m.9 views

GHSA-W5W5-2882-47PC github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee

x/crisis does not charge ConstantFee Impact If a transaction is sent to the x/crisis module to check an invariant, the ConstantFee parameter of the chain is NOT charged. All versions of the x/crisis module are affected on all versions of the Cosmos SDK. Details The x/crisis module is supposed to...

7AI score
Exploits0References3
Code423n4
Code423n4
added 2023/06/23 12:0 a.m.13 views

Almost all of the github.com/cosmos/cosmos-sdk/types will be deprecated

Lines of code Vulnerability details Impact Codes in the scope won't work if the would be updated. Proof of Concept It is clearly seen that in the it is fixed version of v0.45.9. However, in next version of cosmos-sdk all of the Int methods will be deprecated. Almost all of the code in the scope i...

6.9AI score
Exploits0
Rows per page
Query Builder