| Package | Affected versions | Patched versions |
|---|---|---|
| ethermint | ≤ 0.4.0 |
Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memory(stateObject.code) and is further written to persistent store at the Endblock stage, which may be utilized to build honeypot contracts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free