Skip to content
OpenAdvisories
High GHSA-56j4-446m-qrf6 GO-2025-3791

Babylon vulnerable to chain half when transaction has fees different than `ubbn`

Published Jun 30, 2025 · Updated Jul 29, 2025 · Assigned by GHSA

Description

### Summary

Sending transactions with fees different than native Babylon genesis denom (`ubbn`) leads to chain halt.

### Impact

Denial of Service - Due to panic in the `x/distribution` module `BeginBlocker` triggered by a error when sending fees from `feeCollector` to `x/distribution` module - https://github.com/cosmos/cosmos-sdk/blob/main/x/distribution/keeper/allocation.go#L28 Babylon Genesis will halt

Affected packages

References