All products

github.com/babylonlabs-io/babylon/v2

Go · Package
6 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbondGHSA-4RMQ-MC2C-R495 · GO-2025-4214Version ranges need review. github.com/babylonlabs-io/babylon/v2github.com/babylonlabs-io/babylon/v3 Go Medium Fix reported
Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlersGHSA-M6WQ-66P2-C8PC · GO-2025-4211Version ranges need review. github.com/babylonlabs-io/babylon/v2github.com/babylonlabs-io/babylon/v3 Go High Fix reported
Babylon's malformed vote extensions are not rejectedGHSA-2FCV-QWW3-9V6H · GO-2025-4157Version ranges need review. github.com/babylonlabs-io/babylon/v2github.com/babylonlabs-io/babylon/v3 Go High Fix reported
Babylon's BIP322 signature implementation is not fully compliant to the specGHSA-XQ4H-WQM2-668W · GO-2025-4159Version ranges need review. github.com/babylonlabs-io/babylon/v2github.com/babylonlabs-io/babylon/v3 Go Medium Fix reported
Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundaryGHSA-RJ53-J6JW-7F7G · GO-2025-3801Version ranges need review. github.com/babylonlabs-io/babylon/v2github.com/babylonlabs-io/babylon Go High Fix reported
Babylon vulnerable to chain half when transaction has fees different than `ubbn`GHSA-56J4-446M-QRF6 · GO-2025-3791Version ranges need review. github.com/babylonlabs-io/babylon/v2github.com/babylonlabs-io/babylon Go High Fix reported