Security

State divergence enables unauthorized access

We found and reported a bug in Provenance Blockchain, a public proof-of-stake chain built on Cosmos SDK, that lets any user grant themselves admin control over marker accounts without holding a single token. Provenance covers a range of financial services, including on-chain tokenized loans, private equity tokens, bridged assets, and asset registries. Our bug affected 82 markers representing live…

Coverage 1 publisher

  1. Trail of Bits

    State divergence enables unauthorized access

Articles stay on their publishers’ sites; each link opens the original.