CVE-2026-62162

Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the Claim branch in hydra-plutus/validators/deposit.ak checks only that datum.headid matches the attacker-controlled redeemer.currencySymbol and that the transaction is valid before the deposit deadline. It neither requires...