3 results · Feed
-
Critical —
Namada-apps allows Excessive Computation in Mempool Validation
### Impact A malicious transaction may cause an expensive computation in mempool validation. A transaction with multiple repeated sections causes the section hash calculation used for signature validation to grow exponentially (and potentially even cubic) in …
-
Critical —
Namada-apps can Crash with Excessive Computation in Mempool Validation
### Impact A malicious transaction may cause a crash in mempool validation. A transaction with authorization section containing 256 public keys or more with valid matching signatures triggers an integer overflow in signature verification that causes a the nod…
-
Critical —
Namada-apps allows Post-Genesis Validator Bypass
### Impact Ledger crash. A user is able to initialize a post-genesis validator with a negative commission rate using the `--force` flag. If this validator gets into the consensus set, then when computing PoS inflation inside `fn update_rewards_products_and_mi…