Evmos Users Affected by Delegation of Unvested Tokens
CVE-2024-37154

5.3MEDIUM

Key Information:

Vendor

Evmos

Status
Evmos
Vendor
CVE Published:
6 June 2024

What is CVE-2024-37154?

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via ClawbackVestingAccount. This affects 18.1.0 and earlier.

Affected Version(s)

evmos <= 18.1.0

References

https://github.com/evmos/evmos/security/advisories/GHSA-7...
x_refsource_CONFIRM

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.