Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2020-5232

Ethereum Name Service - Malicious takeover of previously owned ENS names

Description

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ensdomains @ensdomains/ens

  • < 0.4.0affected

References