Improper Handling of Babylonian Sqrt Calculation in Vyper for EVM by Vyperlang

CVE-2025-26622

What is CVE-2025-26622?

Vyper, a Pythonic Smart Contract Language for the Ethereum Virtual Machine, contains a flaw in its sqrt() function, which utilizes the Babylonian method for calculating square roots. The vulnerability arises from the improper handling of oscillating final states, potentially leading to inaccurate results when rounding square roots of decimals. This flaw can affect the integrity of smart contracts deployed using Vyper. A fix is anticipated in version 0.4.1, and users are strongly urged to update as soon as the patched version is released, as there are currently no workarounds available for this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References