Understanding Verification Vulnerabilities in Cross-Chain Bridges: An Empirical Study

With the rapid development of blockchain technology, numerous heterogeneous blockchains have emerged, each featuring distinct architectures, consensus mechanisms, and application ecosystems. Cross-chain bridges have consequently become a critical infrastructure component, typically relying on sma...

Sigstore security vulnerabilities

Sigstore is an open-source software signature verification library developed by sigstore. Versions of Sigstore prior to 0.2.3 contained security vulnerabilities. These vulnerabilities stemmed from the improper propagation of failure messages during the verification process, which could lead to...

EUVD-2023-12519

Malicious code in bioql PyPI...