Skip to content
Threat Feed
Subscribe

Tag

Bsv

2 briefs RSS
medium advisory

Transaction Recipient Substitution Vulnerability in @bsv/wallet-toolbox

A vulnerability (CVE-2026-56744) in @bsv/wallet-toolbox and related packages allows a compromised or malicious storage provider to silently substitute transaction recipient scripts, causing funds to be sent to attacker-controlled addresses.

@bsv/wallet-toolbox +2 vulnerability integrity bsv supply-chain
1t 1c 1i
high advisory

BSV Ruby SDK Improper ARC Response Handling

BSV Ruby SDK versions before 0.8.2 improperly handle ARC responses, treating certain failure statuses as successful broadcasts, potentially tricking applications into trusting unaccepted transactions; version 0.8.2 resolves this vulnerability.

bsv ruby blockchain vulnerability
2r 1t 1c