Skip to content
Threat Feed
Subscribe

Tag

Consensus-Failure

4 briefs RSS
high advisory

Authorization Bypass in Klever-Go KleverUpdateAccountPermission Built-in

An authorization flaw in the Klever-Go VM allows attackers to execute an account takeover by leveraging an incorrectly validated RecipientAddr parameter during indirect smart contract calls.

klever-go +2 blockchain smart-contract vulnerability privilege-escalation log-manipulation unauthenticated-access websocket-vulnerability consensus-failure +6
1r 7t updated
critical advisory

Zebra Consensus Divergence in Transparent Sighash Hash-Type Handling (CVE-2026-44497)

Zebra versions prior to 4.4.0 exhibit a consensus divergence vulnerability (CVE-2026-44497) due to insufficient error handling of invalid sighash types during sighash computation, potentially leading to network partitioning and double-spend attacks.

zebrad +1 consensus-failure vulnerability network-partition
2r
medium advisory

Zebra Block Validator Sigops Undercount Vulnerability

Zebra's block validator undercounts signature operations, allowing it to accept invalid blocks, leading to a network split between Zebra and zcashd nodes.

zebra blockchain consensus-failure zcash
2r
critical advisory

Zebra Consensus Failure due to Improper SIGHASH_SINGLE Validation

Zebra 4.4.0 failed to enforce a ZIP-244 consensus rule for V5 transparent transactions, potentially leading to a consensus split with zcashd nodes if an input is signed with `SIGHASH_SINGLE` and there is no corresponding output.

zebra +1 consensus failure signature validation network partition
2r 1t