Skip to content
OpenAdvisories

Package · Go

github.com/crypto-org-chain/cronos

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • High 8.2
    GHSA-gwj5-wp6r-5q9f

    Cronos vulnerable to DoS through unintended Contract Selfdestruct

    In Cronos nodes running versions before v0.7.0, the contract selfdestruct invocation permanently removes the corresponding bytecode from the internal database storage. However, due to a bug in Ethermint, all contracts that used the identical bytecode (i.e sha…

    github.com/crypto-org-chain/cronos Go
  • High 8.2
    CVE-2022-35936

    Ethermint DoS through Unintended Contract Selfdestruct

    Ethermint is an Ethereum library. In Ethermint running versions before `v0.17.2`, the contract `selfdestruct` invocation permanently removes the corresponding bytecode from the internal database storage. However, due to a bug in the `DeleteAccount`function, a…

    evmos ethermint github.com/evmos/evmos github.com/evmos/evmos/v2 Go
  • High 7.5
    CVE-2021-43839

    Drainage of FeeCollector's Block Transaction Fees

    Cronos is a commercial implementation of a blockchain. In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted MsgEthereumTx. This problem has bee…

    crypto-org-chain cronos github.com/crypto-org-chain/cronos github.com/tharsis/evmos Go