Skip to content
OpenAdvisories

Vendor

klever-io

18 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Critical 9.6

    Klever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)

    Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, split-royalty fields decoded in core/kapp/builtInFunctions/utils.go can contain values greater than core.HundredPercent, and core/kapp/kda/create.go and core/kapp/kda/trigg…

  • Critical 9.6

    Klever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)

    Klever-Go is the Go implementation of the Klever blockchain protocol. Prior to 1.7.19, marketplace settlement in core/kapp/market/market.go reads MarketOrderData.ReferralPercentage from the listing while reading asset.Royalties.MarketPercentage live at purcha…