Skip to content
Threat Feed
Subscribe

Tag

Theft

1 brief RSS
high advisory

Authorization Bypass in Klever-Go KleverUpdateAccountPermission Built-in

An authorization flaw in the Klever-Go VM allows attackers to execute an account takeover by leveraging an incorrectly validated RecipientAddr parameter during indirect smart contract calls.

klever-go +2 blockchain smart-contract vulnerability privilege-escalation log-manipulation unauthenticated-access websocket-vulnerability consensus-failure +6
1r 7t updated