https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 13:46:43 +0000 https://cve.radiocsirt.org/vuln/cve-2024-37153 <p><strong>Affected:</strong> evmos</p> <p>Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. There is an issue with how to liquid stake using Safe which itself is a contract. The bug only appears when there is a local state change together with an ICS20 transfer in the same function and uses the contract&#39;s balance, that is using the contract address as the sender parameter in an ICS20 transfer using the ICS20 precompile. This is in essence the &#34;infinite money glitch&#34; allowing contracts to double the supply of Evmos after each transaction.The issue has been patched in versions &gt;=V18.1.0.</p> <p><strong>Affected:</strong> evmos</p> <p>Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. There is an issue with how to liquid stake using Safe which itself is a contract. The bug only appears when there is a local state change together with an ICS20 transfer in the same function and uses the contract&#39;s balance, that is using the contract address as the sender parameter in an ICS20 transfer using the ICS20 precompile. This is in essence the &#34;infinite money glitch&#34; allowing contracts to double the supply of Evmos after each transaction.The issue has been patched in versions &gt;=V18.1.0.</p> https://cve.radiocsirt.org/vuln/cve-2024-37153