Evmos vulnerabilities
We track 4 vulnerabilities in Evmos products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on July 5, 2024.
Latest Evmos vulnerabilities
- 8.1 High severity
evmos: Incorrect Authorization
Evmos is a decentralized Ethereum Virtual Machine chain on the Cosmos Network. Prior to version 19.0.0, a user can create a vesting account with a 3rd party account (EOA or contract) as funder. Then, this user can create an authorization for the contract.Calle
- 8.1 High severity
evmos: Insufficient Control Flow Management
Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Preliminary checks on actions computed by the clawback vesting accounts are performed in the ante handler. Evmos core, implements two different ante handlers: one for Cosmos transactions an
- 7.5 High severity
evmos: Always-Incorrect Control Flow Implementation
Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. There is an issue with how to liquid stake using Safe which itself is a contract. The bug only appears when there is a local state change together with an ICS20 transfer in the same functio
- 9.1 Critical severity
evmos: Improper Synchronization
Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there is a way to mint arbitrary tokens due to the possibility to have two different states not in sync during the exe