Skip to content
OpenAdvisories

Vendor

UltraDAGcom

2 known vulnerabilities.

Products

core 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2026-42278

    UltraDAG: Smart Account Spending Policy Bypass via Pockets

    UltraDAG is a minimal DAG-BFT blockchain in Rust. Prior to commit fb6ef59, the UltraDAG StateEngine implementation of SmartTransferTx contains a critical logic flaw in its policy enforcement pipeline. When a transaction originates from a "Pocket" (a derived s…

    UltraDAGcom core
  • High 8.8
    CVE-2026-40583

    UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt

    UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred.

    UltraDAGcom core