CVE-2024-24559

Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack management when compiling the "IR" for "sha364". Concretely, the "height" variable is miscalculated. The vulnerability can't be triggered without writing the "IR" by hand that is, it cannot be triggered from...

CVE-2024-24559: Use of a Broken or Risky Cryptographic Algorithm

Vyper is a Pythonic Smart Contract Language for the EVM. There is an error in the stack management when compiling the IR for sha364. Concretely, the height variable is miscalculated. The vulnerability can't be triggered without writing the IR by hand that is, it cannot be triggered from regular...