Skip to content
OpenAdvisories

Package · Go

github.com/babylonlabs-io/finality-provider

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High —
    GHSA-4jmp-x7mh-rgmr

    Finality Provider vulnerable to anti-slashing bypassing due to misconfiguration

    ### Summary The anti-slashing is not effective if the attacker can access EOTS manager endpoints. ### Impact If the EOTS manager endpoints are open to public without HMAC protection, the attacker can manually cause slashing of the finality provider through th…

    github.com/babylonlabs-io/finality-provider Go