435 matches found
EUVD-2022-36126
Malicious code in bioql PyPI...
EUVD-2022-6227
Malicious code in bioql PyPI...
EUVD-2025-21796
Malicious code in bioql PyPI...
Malicious code in solidity-utils-docify (npm)
The package solidity-utils-docify was found to contain malicious code...
MAL-2025-42085 Malicious code in solidity-utils-docify (npm)
The package solidity-utils-docify was found to contain malicious code...
Malicious code in openzeppelin-solidity-2.3.0 (npm)
The package openzeppelin-solidity-2.3.0 was found to contain malicious code...
MAL-2025-28346 Malicious code in openzeppelin-solidity-2.3.0 (npm)
The package openzeppelin-solidity-2.3.0 was found to contain malicious code...
MAL-2025-27396 Malicious code in nexo-solidity-smart-contracts (npm)
The package nexo-solidity-smart-contracts was found to contain malicious code...
Malicious code in nexo-solidity-smart-contracts (npm)
The package nexo-solidity-smart-contracts was found to contain malicious code...
Malicious code in solidity-coverage (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-6589 Malicious code in solidity-coverage (PyPI)
--- -= Per source details. Do not edit below this line.=-...
solidity:yul_proto_ossfuzz: Heap-use-after-free in solidity::yul::NoOutputEVMDialect::NoOutputEVMDialect
Project: https://github.com/ethereum/solidity.git Detailed Report: https://oss-fuzz.com/testcase?key=4661678983938048 Project: solidity Fuzzing Engine: libFuzzer Fuzz Target: yulprotoossfuzz Job Type: libfuzzerasansolidity Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...
@oasisprotocol/sapphire-contracts (0.2.17), @openwhaleorg/pendle (>=0.1.0, <=0.1.14) +15 more potentially affected by CVE-2025-54070 via @openzeppelin/contracts-upgradeable (>=5.2.0, <=5.3.0)
@openzeppelin/contracts-upgradeable NPM version =5.2.0, =0.1.0, =0.1.0, =0.0.4, =1.0.0, =0.1.0, =0.3.0, =0.5.3, =7.9.0-maine3c28f1, =3.0.0-rc.0, =1.0.0-alpha.1, =0.3.0, =0.3.0, =0.3.2, =0.1.0, =0.3.1 and more Source cves: CVE-2025-54070 Source advisory: OSV:GHSA-9RCW-C2F9-2J55...
@1inch/delegating (2.0.0), @1inch/farming (4.0.0) +33 more potentially affected by CVE-2025-54070 via @openzeppelin/contracts (>=5.2.0, <=5.3.0)
@openzeppelin/contracts NPM version =5.2.0, =1.0.0-alpha.9, =0.1.0, =0.1.0, =0.0.4, =1.0.0, =0.1.0, =0.3.0, =0.5.3, =7.9.0-main3c5a2f8, =7.9.0-maine3c28f1, =7.9.0-main01f77d70, =7.9.0-mainc91b9b3, =8.0.9 and more Source cves: CVE-2025-54070 Source advisory: OSV:GHSA-9RCW-C2F9-2J55...
CVE-2025-53638 Solady lacks extcodesize validation on implementation in ERC4337Factory
Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, when an account is deployed via a proxy, using regular Solidity to call its initialization function may result in a silent failure, if the initialization function does not return...
CVE-2025-53638
Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, when an account is deployed via a proxy, using regular Solidity to call its initialization function may result in a silent failure, if the initialization function does not return...
CVE-2025-53638: Improper Check for Unusual or Exceptional Conditions
Solady is software that provides Solidity snippets with APIs. Starting in version 0.0.125 and prior to version 0.1.24, when an account is deployed via a proxy, using regular Solidity to call its initialization function may result in a silent failure, if the initialization function does not return...
On the Consideration of Vanity Address Generation Via Identity-Based Signatures
An address is indicated as an identifier of the user on the blockchain, and is defined by a hash value of the ECDSA verification key. A vanity address is an address that embeds custom characters such as a name. To generate a vanity address, a classical try-and-error method is employed, and thus t...
Static Analysis for Detecting Transaction Conflicts in Ethereum Smart Contracts
Ethereum smart contracts operate in a concurrent environment where multiple transactions can be submitted simultaneously. However, the Ethereum Virtual Machine EVM enforces sequential execution of transactions within each block to prevent conflicts arising from concurrent access to the same state...
CVE-2025-52884
RISC Zero is a zero-knowledge verifiable general computing platform, with Ethereum integration. The risc0-ethereum repository contains Solidity verifier contracts, Steel EVM view call library, and supporting code. Prior to versions 2.1.1 and 2.2.0, the "Steel.validateCommitment" Solidity library...