Browse / Cosmos

Cosmos

See its reports on the map

What gets reported to Cosmos

• Business Logic4
• Denial of Service3
• Access Control2
• Other weaknesses1
• Memory Corruption1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. Groups module can halt chain when handling a proposal with malicious group weights high
   $15,00091 votes
2. Unauthorized coins transfer from locking account(s)Improper Access Control - Generic · critical
   81 votes
3. Attacker can use any non-enabled capabilityPrivilege Escalation · low
   $2,00081 votes
4. Race condition in faucet when using starportBusiness Logic Errors · critical
   $5,00061 votes
5. Memory Exhaustion in CometBFT v1.0.1 via malicious ProposalMessage leads to network-wide denial of serviceN/AUncontrolled Resource Consumption
   47 votes
6. Heap-Buffer-Overread in contains_whitespace when calling parser_validate after supplying a maliciously crafted buffer to parser_parseBuffer Over-read
   $2,00034 votes
7. Unclaimed official s3 bucket of tendermint(tendermint-packages) which is used by many other blockchain companies in their codeBusiness Logic Errors · low
   27 votes
8. Making transfer v2 channel unupgradable through the forwarding Business Logic Errors · low
   26 votes
9. Replacing ICA active channel during the upgrade and a bit moreBusiness Logic Errors · low
   22 votes
10. Economic DoS (Griefing) on IBC Relayers via `memo` Callback Gas ExploitationN/AUncontrolled Resource Consumption · high
    16 votes
11. IBC2 Entry Points Skip SetupContractCost - Systematic Gas UnderpricingDuplicateUncontrolled Resource Consumption · medium
    9 votes