highAccess controlCosmos-SDK
Cosmos SDK module allows unauthorized state migration via missing ante handler check
- Payout
- $250k
- Protocol
- IBC App Chain
- Disclosed
- Dec 5, 2023
- Source
- immunefi
A logic flaw in a Cosmos SDK module's state migration handler allowed unauthorized signers to execute privileged state updates. The message authority check relied on a helper function that returned true when the authority field was empty, and the message route …
Similar reports
- No close matches yet.
References
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.