Bitfrost.io vulnerabilities
We track 1 vulnerability in Bitfrost.io products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 8, 2026.
1vulnerabilities
1critical
0high
0exploited
9.1average CVSS score
Latest Bitfrost.io vulnerabilities
- 9.1 Critical severity
Bifrost: Authorization Bypass Through User-Controlled Key
The `vtoken-minting` and `slpx` pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered `channel_id` when minting tokens without verifying that the caller is auth