1 result · Clear filters · Feed
-
Critical 9.1
Bifrost Unauthorized Channel Commission Attribution Allows Commission Diversion
The `vtoken-minting` and `slpx` pallets in Bifrost contain an improper authorization vulnerability in channel commission attribution. A signed account can supply an arbitrary registered `channel_id` when minting tokens without verifying that the caller is aut…