An authorization flaw in the Klever-Go VM allows attackers to execute an account takeover by leveraging an incorrectly validated RecipientAddr parameter during indirect smart contract calls.
klever-go +2
blockchain
smart-contract
vulnerability
privilege-escalation
log-manipulation
unauthenticated-access
websocket-vulnerability
consensus-failure
+6
1r
7t
updated