Skip to content
OpenAdvisories

Package · Go

github.com/tharsis/evmos

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.1
    CVE-2024-32644

    Evmos' transaction execution not accounting for all state transition after interaction with precompiles

    Evmos is a scalable, high-throughput Proof-of-Stake EVM blockchain that is fully compatible and interoperable with Ethereum. Prior to 17.0.0, there is a way to mint arbitrary tokens due to the possibility to have two different states not in sync during the ex…

    evmos evmos github.com/evmos/evmos/v4 github.com/evmos/evmos/v6 Go
  • High 8.1
    CVE-2022-24738

    Account compromise in Evmos

    Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. In versions of evmos prior to 2.0.1 attackers are able to drain unclaimed funds from user addresses. To do this an attacker must create a new chain which does not enforce signature verific…

    tharsis evmos github.com/tharsis/evmos github.com/tharsis/evmos/v2 Go
  • High 7.5
    CVE-2021-43839

    Drainage of FeeCollector's Block Transaction Fees

    Cronos is a commercial implementation of a blockchain. In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted MsgEthereumTx. This problem has bee…

    crypto-org-chain cronos github.com/crypto-org-chain/cronos github.com/tharsis/evmos Go