github.com/babylonlabs-io/babylon/v4

2 results · Clear filters · Feed

• High —
  GHSA-m6wq-66p2-c8pc

  Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers

  ### Summary A vulnerability exists in Babylon’s BLS vote extension processing where a malicious active validator can submit a VoteExtension with the `block_hash` field omitted from the protobuf serialization. Because protobuf fields are optional, unmarshallin…

  github.com/babylonlabs-io/babylon github.com/babylonlabs-io/babylon/v2 github.com/babylonlabs-io/babylon/v3 github.com/babylonlabs-io/babylon/v4 Go
  Dec 8, 2025
• High —
  GHSA-2fcv-qww3-9v6h

  Babylon's malformed vote extensions are not rejected

  ### Summary Adversarial validators can send large vote extensions by using non-existing protobuf tags. This will result in the rejection of the subsequent block proposal. Eventually, all block proposals will be rejected by all validators. ### Impact A small g…

  github.com/babylonlabs-io/babylon github.com/babylonlabs-io/babylon/v2 github.com/babylonlabs-io/babylon/v3 github.com/babylonlabs-io/babylon/v4 Go
  Nov 24, 2025