Klever: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

Summary The per-entry percentages of a KDA asset's split royalties are validated by summing them into a uint32 accumulator and checking the sum against HundredPercent 10000, with no upper bound on each individual entry. Two split entries whose percentages sum to just over 2^32 wrap around below...

CVE-2026-54755

Klever-Go (the Go implementation of the Klever blockchain) contains a uint32 integer overflow in split-royalty validation. Per-entry royalty percentages are decoded without an upper bound, and the validation sum wraps to zero when two crafted values (e.g., 0x80000000 each) overflow uint32, passin...