Evmos Users Affected by Delegation of Unvested Tokens

CVE-2024-37154

5.3MEDIUM

Key Information

Vendor: Evmos
Status: Evmos
Vendor: CVE Published:; 6 June 2024

Summary

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via `ClawbackVestingAccount`. This affects 18.1.0 and earlier.

Affected Version(s)

evmos = <= 18.1.0

CVSS V3.1

Score:

5.3

Severity:

MEDIUM

Confidentiality:

None

Integrity:

Low

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published.
Jun 6, 2024
Vulnerability Reserved.
Jun 3, 2024

Collectors

NVD DatabaseMitre Database