Vendor
high
advisory
Authorization Bypass in Klever-Go KleverUpdateAccountPermission Built-in
1 rule 7 TTPsAn authorization flaw in the Klever-Go VM allows attackers to execute an account takeover by leveraging an incorrectly validated RecipientAddr parameter during indirect smart contract calls.
klever-go +2
blockchain
smart-contract
vulnerability
privilege-escalation
log-manipulation
unauthenticated-access
websocket-vulnerability
consensus-failure
+6
1r
7t
updated
medium
advisory
Integer Overflow in Klever Split-Royalty Validation Enables Unbounded Token Minting
1 TTPAn integer overflow vulnerability in the Klever node (klever-go) allows attackers to mint arbitrary amounts of KLV and other assets by bypassing split-royalty validation checks.
klever-go
integer-overflow
blockchain
financial-integrity
1t