CVE-2026-53924

Gardens v2 , a modular on-chain governance framework, contains a logic flaw in the StreamingEscrow contract. While claim() correctly rejects withdrawals during a dispute, the permissionless syncOutflow() path performs the same excess-balance transfer without checking the disputed state . After a ...