EUVD-2025-29498

Malicious code in bioql PyPI...

Integer Overflow or Wraparound

Overview Affected versions of this package are vulnerable to Integer Overflow or Wraparound via DepositValidatorRewardsPool. An attacker can cause a chain halt by introducing an overflow condition through a crafted malicious deposit into the Validator Rewards pool when full. Details Denial of...

Denial Of Service (DoS)

github.com/babylonlabs-io/babylon is vulnerable to Denial Of Service DoS. The vulnerability is due to an integer overflow due to depositing a large amount of tokens into the validator rewards pool, which triggers a panic in cumulative reward ratio calculation during the EndBlocker execution...

GHSA-869W-47C6-FQ8Q Babylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt

Summary Minting large amount of tokens through ibc transfer and then depositing them in validator rewards pool via DepositValidatorRewardsPool message can lead to integer overflow panic when calculating cumulativerewardratio for the validator. This calculation happens in x/epoching module...