https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T01:18:38.324663+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-254050 EUVD-2026-254050 2026-10-04T01:18:38.380386+00:00 EUVD-2026-254050 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61595 fkie_cve-2025-61595 2026-10-04T01:18:38.380443+00:00

MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract, potentially amplifying the gas consumption exponentially. This is fixed in version 4.0.2.

 https://cve.radiocsirt.org/vuln/ghsa-qwvm-wqq8-8j69 GHSA-qwvm-wqq8-8j69 — github.com/MANTRA-Chain/mantrachain/x/tokenfactory tx gas limit is not enforced in send hooks 2026-10-04T01:18:38.380497+00:00

Affected: Go: github.com/MANTRA-Chain/mantrachain/v4, Go: github.com/MANTRA-Chain/mantrachain/v3, Go: github.com/MANTRA-Chain/mantrachain/v2, Go: github.com/MANTRA-Chain/mantrachain

### Impact

send hooks can spend more gas than what's remained in tx, combined with recursive calls in the wasm contract, can amplify the gas consumption exponentially.

### Patches

It's patched in v4.0.2 and v5.0.0

### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_

 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15666-1 openSUSE-SU-2025:15666-1 — govulncheck-vulndb-0.0.20251023T162509-1.1 on GA media 2026-10-04T01:18:38.380556+00:00

govulncheck-vulndb-0.0.20251023T162509-1.1 on GA media