← CVE Intelligence

CVE-2024-32873

evmos allows transferring unvested tokens after delegations PUBLISHED

Description (CNA)

Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. The spendable balance is not updated properly when delegating vested tokens. The issue allows a clawback vesting account to anticipate the release of unvested tokens. This vulnerability is fixed in 18.0.0.

Affected (CNA)

Vendor / productVersions
evmos / evmosaffected < 18.0.0

CWE

CWE-682

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.