CyberSecBulletin

Cardano-scaling vulnerabilities

We track 1 vulnerability in Cardano-scaling products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.

1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score

Latest Cardano-scaling vulnerabilities

  • 8.2 High severity

    hydra: Missing Authorization

    CVE-2026-62162Cardano-scaling

    Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/deposit.ak` checks only that `datum.head_id` matches the attacker-controlled `redeemer.currencySymbol` and that the transaction is valid befor