Privilege Escalation

2022-03-0804:53:51

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

evmos

vulnerability

privilege escalation

signature verification

attacker

unclaimed funds

user addresses

software

chain

victim's instance

EPSS

0.002

Percentile

62.3%

JSON

github.com/tharsis/evmos is vulnerable to privilege escalation. An attacker is able to drain unclaimed funds from user addresses by creating a new chain which does not enforce signature verification and connecting it to the targeted victim’s evmos instance.