Tag
high
advisory
Information Disclosure in OpenZeppelin Confidential Contracts
1 TTPThe OpenZeppelin confidential-contracts library is vulnerable to private data leakage due to improper validation of encrypted handles returned by untrusted ERC-7984 tokens and recipients.
confidential-contracts
vulnerability
smart-contract
crypto
exfiltration
1t
high
advisory
Authorization Bypass in Klever-Go KleverUpdateAccountPermission Built-in
1 rule 7 TTPsAn authorization flaw in the Klever-Go VM allows attackers to execute an account takeover by leveraging an incorrectly validated RecipientAddr parameter during indirect smart contract calls.
klever-go +2
blockchain
smart-contract
vulnerability
privilege-escalation
log-manipulation
unauthenticated-access
websocket-vulnerability
consensus-failure
+6
1r
7t
updated
medium
advisory
Mezo L1 Bridge Vulnerability Leads to Potential ERC-20 Drain
3 rules 2 TTPsA vulnerability in the Mezo bridge allows for the potential full drain of the L1 bridge without changing the bridged balance on Mezo due to a stale StateDB overwrite, enabling a malicious user to steal ERC-20 tokens locked in the L1 bridge.
MezoBridge
blockchain
smart-contract
bridge
state-overwrite
3r
2t