CVE-2024-32873CWE-682

evmos allows transferring unvested tokens after delegations

Low · published June 6, 2024

CVSS v3.1
3.5
EPSS
0%
Percentile
31.3
In the wild
Unconfirmed
What it is

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. The spendable balance is not updated properly when delegating vested tokens. The issue allows a clawback vesting account to anticipate the release of unvested tokens. This vulnerability is fixed in 18.0.0.

The record
Technical detail
CVSS v3.1
3.5 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00384 · 31.3th percentile
Weakness
CWE-682 · Incorrect Calculation
Published
2024-06-06T18:13Z
EPSS history
Timeline
  • 06 JUN 18:13Z
    evmos allows transferring unvested tokens after delegations
    cvelistv5