11 matches found
SUSE CVE-2026-54754
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purchase time. An asset owner can create a...
GO-2026-6315 Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped) in github.com/klever-io/klever-go
Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid negative seller share silently skipped in github.com/klever-io/klever-go...
CVE-2026-54754
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purchase time. An asset owner can create a...
GHSA-P7GW-2PCP-5PF8 Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)
Summary When a marketplace order is settled MarketBuy / BuyItNow, and auction Claim, the buyer's payment is split three ways — referral, royalties, and the seller market-order owner remainder: marketOwnerAmount = CurrentBid − referralAmount − royaltiesAmount Referral and royalties are paid out...
Klever: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)
Summary When a marketplace order is settled MarketBuy / BuyItNow, and auction Claim, the buyer's payment is split three ways — referral, royalties, and the seller market-order owner remainder: marketOwnerAmount = CurrentBid − referralAmount − royaltiesAmount Referral and royalties are paid out...
CVE-2026-54754 Klever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purchase time. An asset owner can create a...
CVE-2026-54754 Klever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purchase time. An asset owner can create a...
EUVD-2026-67824
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purchase time. An asset owner can create a...
CVE-2026-54754 Klever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)
Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purchase time. An asset owner can create a...
CVE-2026-54754
Klever-Go (the Go node for the Klever blockchain) has a time-of-check/time-of-use flaw in marketplace settlement (core/kapp/market/market.go). The referral percentage is snapshotted at listing, but the royalty percentage is read live at purchase. An asset owner can raise the royalty via UpdateRoy...
PT-2026-83227
Name of the Vulnerable Software and Affected Versions Klever-Go versions prior to 1.7.19 Description A time-of-check/time-of-use TOCTOU issue exists in the marketplace settlement process. While the system ensures that the combined referral and royalty percentages do not exceed 100% at the time of...