Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2024-32873

evmos allows transferring unvested tokens after delegations

Description

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. The spendable balance is not updated properly when delegating vested tokens. The issue allows a clawback vesting account to anticipate the release of unvested tokens. This vulnerability is fixed in 18.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

evmos evmos

  • < 18.0.0affected

References