Skip to content
OpenAdvisories

Vendor

cardano-scaling

2 known vulnerabilities.

Products

hydra 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-62162

    Hydra: Deposit Claim omits Head state-token spending requirement

    Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/deposit.ak` checks only that `datum.head_id` matches the attacker-controlled `redeemer.currencySymbol` and that the transaction is valid befo…

    cardano-scaling hydra