Skip to content
OpenAdvisories

Product · Bitfrost.io

Bifrost

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.1

    Bifrost Unauthorized Channel Commission Attribution Allows Commission Diversion

    The `vtoken-minting` and `slpx` pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered `channel_id` when minting tokens without verifying that the caller is aut…