Immunefi Audit CompetitionsQuantus | Audit Competition
Reports by Severity
Critical
- 88730 - [W&A - Critical] generated multiaddress index decodes unit as compact letting one signer hide transfer all in an authoritative 2 of 2 multisig proposal and drain the multisig
- 88628 - [BC - Critical] balances transfer allow death debits the sender credits the recipient nothing and reports success
- 88609 - [BC - Critical] high security whitelist is incomplete the transaction tip bypasses the guardian delay entirely
- 89136 - [BC - Critical] missing deposit release calls in the high security whitelist permanently freeze reserved balances including an uninvolved third party s recovery deposit
- 90207 - [BC - Critical] missing zk tree leaf on the wormhole miner fee credit leads to permanent freezing of the block author s volume fee
- 89999 - [W&A - Critical] multisig discovery accepts an indexer supplied address without verifying its derivation
- 89007 - [W&A - Critical] accessibility bypass of the wallet lock screen permits an unauthenticated sweep of the entire wormhole balance
- 89832 - [BC - Critical] unbounded transaction tips bypass high security containment and drain compromised accounts
- 89819 - [BC - Critical] missing fips 204 domain separation in ml dsa transaction verification lets a victim s message signature authorize a transfer enabling direct theft of user funds
- 89802 - [W&A - Critical] missing chain identity validation in the quantus sdk signing path lets a malicious rpc endpoint obtain signatures valid on an unintended chain
- 88841 - [BC - Critical] high security accounts are drained irreversibly through the transaction tip which no high security check in the runtime models the guardian delay cancel and recover funds are
- 89438 - [BC - Critical] miner controlled future timestamps bypass reversible transfer cancellation windows and cause direct loss of funds
- 89347 - [BC - Critical] high security accounts can be drained immediately via an unbounded tip on a whitelisted call
High
- 89306 - [BC - High] reward leaves commit floor amount 1e10 with no remainder carry
- 89304 - [BC - High] wormhole miner volume fee is credited without a zk leaf and can never be spent
- 88735 - [BC - High] lossy wormhole leaf quantization permanently freezes a portion of every non aligned mining reward and transaction fee payout
- 89283 - [W&A - High] runtime metadata interpretation conflict in quantus sdk lets a multisig signer conceal transfer all and drain shared funds
- 90460 - [W&A - High] quantus pos accepts a replaceable pool transaction as payment before execution
- 89250 - [BC - High] missing quantum alignment in the wormhole deposit chokepoint leads to permanent freezing of funds
- 89247 - [BC - High] zero value wormhole exits bypass every fee floor letting a free settlement consume 83 of a block and permanently occupy 7 nullifier slots per spend
- 88667 - [W&A - High] unhandled call decode failure in the multisig approval sheet leads to direct theft of user funds
- 89197 - [BC - High] missing zk leaf recording permanently freezes miner fee balances credited to keyless wormhole accounts
- 90400 - [BC - High] opaque multisig proposals bypass the 256 level extrinsic depth limit and repeatedly trap block author wasm without a durable fee or nonce charge
- 89171 - [BC - High] missing pending connection cap and per ip limit in litep2p tcp transport causes 30 resource increase and 500 block delays via zombie peer flood
- 88571 - [BC - High] missing zk tree leaf on the wormhole exit miner fee credit permanently freezes all miner exit fee revenue keyless account no exit path
- 89163 - [BC - High] miner volume fee is reported as paid but records no zk leaf so the credited fee is unrealizable by the miner
- 90398 - [BC - High] an unauthenticated attacker will force processing nodes to process unsigned wormhole mempool transactions beyond configured proposer limits
- 88566 - [BC - High] pr 656 incomplete remediation bundle level rounding under settles per leaf wormhole fees
- 88540 - [BC - High] wormhole miner volume fees are permanently unclaimable because no zk leaf is created
- 89151 - [W&A - High] primary only utility if else approval summary shows 1 quan while a 50 quan fallback drains the multisig
- 89139 - [BC - High] non quantized credits to wormhole addresses permanently lock sub quantum value
- 88485 - [BC - High] unverified nullifier public inputs bypass wormhole semantic txpool deduplication
- 90351 - [W&A - High] the multisig approval screen signs call bytes it could not decode showing the signer a call name and no parameters
- 88483 - [W&A - High] official multisig approve displays a zero value call and still signs a full vault transfer
- 89134 - [BC - High] miner volume fee credits lack zk tree leaves permanently freezing block author fees
- 90329 - [BC - High] pallet multisig propose decodes opaque inner calls without a depth limit trapping the block producer
- 88404 - [BC - High] preimage reference over drop in referenda enactment scheduling silently voids a passed governance decision
- 90235 - [BC - High] wormhole fee credits skip record transfer miner and aggregator volume fees are minted to keyless addresses with no zk tree leaf permanently freezing them
- 89095 - [W&A - High] android process death defeats recovery phrase clipboard expiry and exposes the mnemonic to later foreground apps
- 90180 - [BC - High] wormhole miner volume fee credits are uncollectible because no proof leaf is recorded
- 89065 - [BC - High] sub fee exitable wormhole deposits are accepted and recorded but can never be spent or exited permanently freezing user funds
- 90133 - [BC - High] mining rewards are minted at raw precision but their zk leaves commit only floor amount 0 01 quan permanently freezing every remainder and making ordinary fee yield wholly unc
- 89062 - [BC - High] remote unauthenticated block production dos fee free unverifiable wormhole exit proofs force unbounded failed zk verifications on every block producer up to the full 9s build budg
- 89058 - [BC - High] pallet-multisig decodes an opaque inner call with no depth limit: a 4.8 KB nested blob traps the runtime before the weight guard can fire, so the work is never charged
- 89053 - [BC - High] wormhole miner volume fees are permanently unclaimable because the credit creates no zk tree leaf
- 88348 - [W&A - High] exponential synchronous decoding of a 213 byte utility if else proposal leaves the mobile wallet unable to render a frame or accept input whenever the affected multisig account loads
- 89040 - [BC - High] wormhole miner fee credit records no zk tree leaf freezing miner yield
- 89036 - [BC - High] unbounded unauthenticated pq handshakes permanently terminate node p2p networking and can halt network wide transaction confirmation
- 89011 - [W&A - High] fail open runtime call decoding lets a minority multisig signer obtain approval for full balance theft
- 88300 - [BC - High] missing wormhole zk leaf permanently freezes all miner exit fee yield
- 88297 - [BC - High] scheduled transfers below the existential deposit strand the sender s funds with no owner accessible recovery
- 89009 - [BC - High] miner s share of the wormhole exit volume fee is credited to a keyless address with no zk leaf permanently freezing it
- 89987 - [W&A - High] multiaddress index is decoded at a different width by the sdk and the runtime letting a qr code display a harmless batch while signing a 1000 quan transfer to the attacker
- 89008 - [W&A - High] fail open multisig call decoding in the mobile app hides transfer all and enables theft of the full multisig balance
- 89984 - [BC - High] missing zk tree registration for miner volume fees permanently freezes credited funds
- 89950 - [BC - High] process exit bundle never calls record transfer for miner fee every wormhole miner fee credit is permanently unspendable
- 88969 - [BC - High] unbounded recursive decoding of opaque multisig calls makes block authors repeatedly execute unpaid mempool poison
- 88250 - [BC - High] one unauthenticated tcp burst permanently terminates a node s entire networking stack with no recovery short of a process restart
- 88951 - [BC - High] batch level fee rounding permanently strands fees locked by wormhole leaf proofs
- 89808 - [W&A - High] unit accountindex consumes zero runtime bytes while the sdk consumes the next field allowing one canonical approval to display no attacker transfer while transferring 999 999 qu
- 89806 - [W&A - High] frozen vesting decode failure leaves an opaque multisig approval actionable and allows a 999 999 quan drain
- 88943 - [BC - High] Residue truncation and two-leaf split in pallet-mining-rewards lead to permanent freezing of unclaimed miner yield
- 89798 - [W&A - High] multisig review hides call parameters and enables a treasury drain
- 89733 - [BC - High] wormhole miner volume fee is credited to a keyless account without a zk tree leaf permanently freezing it
- 88938 - [BC - High] missing zk tree leaf record in the wormhole miner volume fee credit path leads to permanent freezing of funds
- 88914 - [W&A - High] hide balances masks executable multisig amounts enabling deceptive utility if else approvals
- 89689 - [BC - High] miner volume fee and aggregator rebate credits lack zk tree leaves permanently freezing funds
- 88912 - [BC - High] missing record transfer in wormhole miner fee settlement permanently freezes unclaimed yield
- 88223 - [BC - High] miner volume fee and aggregator rebate are credited to keyless wormhole addresses with no zk tree leaf permanently freezing them incomplete fix of eq qnt wormhole f 03
- 88881 - [BC - High] wormhole miner volume fee is minted without its zk tree leaf permanently freezing every exit fee
- 89657 - [W&A - High] validation gap in multisig confirmation allows approval of hidden transfer arguments
- 89613 - [BC - High] qpow import queue verifier does not check work so an anonymous peer holds an authority in major sync and halts its block production indefinitely at zero hash power
- 88872 - [BC - High] missing record transfer on the miner volume fee credit permanently freezes unclaimed miner yield on a non ml dsa signable qpow wormhole author
- 88851 - [W&A - High] exponential utility if else call display lets a multisig co signer persistently freeze the mobile wallet
- 89552 - [BC - High] qpow miners will permanently freeze the sub quantum remainder of every block reward because mint reward credits full planck while hash leaf only commits floor amount 10 1
- 88771 - [BC - High] wormhole miner volume fee is credited to a key less address with no zk tree leaf permanently freezing it
- 89449 - [BC - High] mining rewards and fee credits mint more than their zk leaf commits stranding the difference at a keyless miner address
- 89448 - [BC - High] block authors are paid wormhole volume fees at a keyless address that no exit proof can unlock
- 89348 - [BC - High] Mining reward's zk-tree leaf floors the amount, freezing the remainder
Medium
- 89307 - [BC - Medium] sub existential deposit block fees are minted before the account endowing reward
- 88215 - [BC - Medium] any account can permanently and irrevocably consume another address s bounded guardian index with no consent and no removal path
- 89284 - [BC - Medium] permissionless high security enrollment lets attackers irreversibly exhaust an arbitrary guardian s account capacity
- 90466 - [BC - Medium] a failed enactment scheduling attempt destroys pallet referenda s preimage reference so an approved referendum s root call is silently lost
- 88671 - [BC - Medium] permissionless vesting claim forces payout fragmentation leading to loss of beneficiary funds
- 89213 - [BC - Medium] permanent guardian enrollment griefing via missing onkilledaccount cleanup
- 90408 - [BC - Medium] quantus s safe rpc exposes genesisbuilder with unbounded derivation paths letting unauthenticated callers pin node cpu cores
- 88633 - [BC - Medium] extrinsicbaseweight does not account for ml dsa 87 verification every signed extrinsic undercharges node cpu by at least 55 7
- 89188 - [W&A - Medium] official utxo pager orders only by block height skips a same height sibling and claim never sees that note
- 89154 - [BC - Medium] sparse public batches retain 742 exit weight for one exit letting an unsigned proof stuff 83 of the normal quota
- 88529 - [BC - Medium] incorrect base extrinsic weight for ml dsa 87 undercharges transaction verification by 70
- 88507 - [BC - Medium] missing guardian consent in set high security lets anyone permanently exhaust another account s guardian slots
- 90360 - [BC - Medium] unauthenticated 28 byte noise negotiation forces ml kem and ml dsa work before peer authentication
- 89137 - [BC - Medium] anyone can permanently exhaust any account s guardian slots for 0 032 unit blocking it from ever protecting another account
- 90343 - [BC - Medium] txpool skips maintain on every finality event watched txs never see finalized and are falsely timed out after 512 blocks despite being finalized
- 89091 - [BC - Medium] quantus adopts an sr25519 calibrated base weight for ml dsa signatures undercharging signed extrinsics by 79 58
- 90220 - [BC - Medium] dilithium signature verification is undercharged by stale base extrinsic weight
- 90210 - [BC - Medium] quantus s 36 772 transaction default crosses the 10 239 entry gossip cache causing repeated full peer disconnects and node resource amplification
- 88397 - [BC - Medium] self directed reversible transfers record wormhole zk tree leaves for credits that never happen
- 88386 - [BC - Medium] unsubscribe lifecycle bug bypasses txwatch rpc caps and increases full node resource use by 121
- 90047 - [BC - Medium] unbounded suri path depth bypasses max dev accounts via public light 2 genesisbuilder build state consuming 190 cpu seconds per 34 kb unauthenticated p2p request
- 88329 - [BC - Medium] missing guardian consent in set high security lets one signer permanently exhaust any guardian s quota and block legitimate enrollments
- 88274 - [W&A - Medium] with hide balance enabled a utility batch multisig proposal shows no transfer amount anywhere on the approval sheet while the same transfer unwrapped still shows it
- 89889 - [BC - Medium] permissionless vesting claim strands a schedule in an un terminable state blocking the treasury s clawback of the final tranche
- 88251 - [BC - Medium] the per extrinsic weight ledger undercharges by 91 9 the runtime inherits upstream substrate s sr25519 constant while verifying post quantum dilithium signatures in wasm
- 88249 - [BC - Medium] extrinsicbaseweight is still upstream s sr25519 measurement after the switch to ml dsa so every signed extrinsic is charged 12 of what it costs
- 88230 - [BC - Medium] pow seal verified in import block instead of the verifier bad seal blocks from a peer trigger an unpenalised sync restart loop stalling block import and mining
- 88227 - [BC - Medium] incomplete degenerate key filter in ml dsa verify var allows keyless signature forgery for a 63 value family of t1 coefficients
- 88939 - [BC - Medium] unauthenticated pq handshakes increase validator cpu consumption by 39 before peer authentication and established connection accounting
- 89762 - [BC - Medium] owner cancelling a reversible transfer mints an unbacked zk tree leaf permanent permissionless state growth
- 88226 - [BC - Medium] two unauthenticated bytes make a node commit 16 kib of resident memory in the pre handshake multistream select framing path
- 88224 - [BC - Medium] a peer advertising a forged block height suspends a victim node s mining and silently blackholes its block import notifications
- 88222 - [BC - Medium] one signer can permanently saturate any account s guardian enrollment capacity without consent using unfunded derivative origins
- 88221 - [W&A - Medium] unvalidated amount in the pay deep link freezes and crashes the wallet via unbounded bigint materialisation on the ui isolate
- 88855 - [BC - Medium] base extrinsic is substrate s stock sr25519 constant signed extrinsic is undercharged
- 88219 - [BC - Medium] Blocks with invalid proof-of-work carry no peer penalty: a hostile peer can force unlimited sync restarts and is re-admitted as a stranger every time
- 89524 - [BC - Medium] retarget schedule silently reassigns a beneficiary s already vested funds to their replacement
- 88218 - [BC - Medium] Per-extrinsic base weight is understated by 12.39×: the runtime inherits upstream Substrate's sr25519 constant while verifying post-quantum Dilithium signatures
- 89492 - [BC - Medium] mismatched dest can deposit check in fungible transfer leads to accepted transfers that credit nothing
- 88786 - [W&A - Medium] official quantus pos marks an attacker crafted rolled back batch all payment as received in violation of the node s documented integration requirement
- 89478 - [W&A - Medium] balance privacy display blanks the transfer amount in the multisig approval confirmation enabling blind co signer approval and direct theft of user funds
- 88736 - [BC - Medium] missing pending handshake admission cap in the quantus pq noise stack lets unauthenticated peers force ml kem ml dsa work and 65 kb allocations per connection increasing node res
- 88768 - [BC - Medium] zero cost mempool flooding via fee free unsigned wormhole exit admission causes network processing nodes to process transactions beyond set parameters
- 89353 - [BC - Medium] unbounded pre auth pq noise setup saturates full node cpu before established peer limits apply
- 89322 - [W&A - Medium] call parsing in quantus sdk freezes mobile wallet
Low
- 89310 - [BC - Low] author steered timestamp delta biases the difficulty retarget downward
- 90496 - [BC - Low] one 1 000 quan balance advertises 1 838 500 quan of unreserved tips to monopolize each targeted node s future queue
- 89219 - [BC - Low] missing merkle leaf record lead to permanent freezing of the miner volume fee
- 90448 - [BC - Low] recover funds is priced by transfer count while its real cost scales with scheduler agenda density
- 88568 - [BC - Low] missing collector storage weight in transactionfeescollector leads to a whole extrinsic undercharge of at least 16 7160
- 90377 - [BC - Low] stale transaction payment benchmark omits quantus fee collector storage undercharging the extension by 48 12 in the measured run
- 90369 - [BC - Low] a failed enactment placement destroys an approved referendum s proposal so the voted root call never executes
- 89098 - [BC - Low] Multisig execute wraps transfers at zero proof-recording weight
- 89077 - [BC - Low] incorrect genesis balance accounting in wormhole on initialize allows reserved locked funds to be exited as free balance leading to direct loss of funds and unauthorized minting
- 88305 - [W&A - Low] quantus sdk predicts a multisig address the chain never creates because its derivation omits the pallet s signer deduplication
- 88263 - [W&A - Low] a late check phrase lookup overwrites the current recipient s phrase so the send review screen vouches for an address the user is not paying
- 89848 - [BC - Low] scheduled reversible transfer can become stuck in a held state after transfer keep alive failure pallet reversible transfers
- 89809 - [W&A - Low] nested utility if else proposal forces exponential work in the official sdk and temporarily disables a victim s multisig view
- 88830 - [BC - Low] missing constraint private batch allows real outputs with canonical zero exit account
- 89475 - [BC - Low] missing zk tree leaf record in the miner volume fee mint leads to permanent freezing of the miner s fee share
Insight
- 88382 - [W&A - Insight] wallet mnemonic stored with default ios keychain accessibility ksecattraccessiblewhenunlocked seed is backup extractable and not device bound
- 88290 - [BC - Insight] non canonical protobuf based peerid derivation in litep2p s noise handshake leads to reputation ban evasion in peerstore
- 88243 - [BC - Insight] check wormhole path accepts any path shape and hdwallet exports no path constructor so the node cli and the mobile sdk derive different wormhole keys for the same index
Reports by Type
Blockchain/DLT
- 89310 - [BC - Low] author steered timestamp delta biases the difficulty retarget downward
- 90496 - [BC - Low] one 1 000 quan balance advertises 1 838 500 quan of unreserved tips to monopolize each targeted node s future queue
- 89307 - [BC - Medium] sub existential deposit block fees are minted before the account endowing reward
- 89306 - [BC - High] reward leaves commit floor amount 1e10 with no remainder carry
- 89304 - [BC - High] wormhole miner volume fee is credited without a zk leaf and can never be spent
- 88215 - [BC - Medium] any account can permanently and irrevocably consume another address s bounded guardian index with no consent and no removal path
- 89284 - [BC - Medium] permissionless high security enrollment lets attackers irreversibly exhaust an arbitrary guardian s account capacity
- 88735 - [BC - High] lossy wormhole leaf quantization permanently freezes a portion of every non aligned mining reward and transaction fee payout
- 90466 - [BC - Medium] a failed enactment scheduling attempt destroys pallet referenda s preimage reference so an approved referendum s root call is silently lost
- 89250 - [BC - High] missing quantum alignment in the wormhole deposit chokepoint leads to permanent freezing of funds
- 89247 - [BC - High] zero value wormhole exits bypass every fee floor letting a free settlement consume 83 of a block and permanently occupy 7 nullifier slots per spend
- 88671 - [BC - Medium] permissionless vesting claim forces payout fragmentation leading to loss of beneficiary funds
- 89219 - [BC - Low] missing merkle leaf record lead to permanent freezing of the miner volume fee
- 90448 - [BC - Low] recover funds is priced by transfer count while its real cost scales with scheduler agenda density
- 89213 - [BC - Medium] permanent guardian enrollment griefing via missing onkilledaccount cleanup
- 90408 - [BC - Medium] quantus s safe rpc exposes genesisbuilder with unbounded derivation paths letting unauthenticated callers pin node cpu cores
- 89197 - [BC - High] missing zk leaf recording permanently freezes miner fee balances credited to keyless wormhole accounts
- 88633 - [BC - Medium] extrinsicbaseweight does not account for ml dsa 87 verification every signed extrinsic undercharges node cpu by at least 55 7
- 90400 - [BC - High] opaque multisig proposals bypass the 256 level extrinsic depth limit and repeatedly trap block author wasm without a durable fee or nonce charge
- 88628 - [BC - Critical] balances transfer allow death debits the sender credits the recipient nothing and reports success
- 88609 - [BC - Critical] high security whitelist is incomplete the transaction tip bypasses the guardian delay entirely
- 89171 - [BC - High] missing pending connection cap and per ip limit in litep2p tcp transport causes 30 resource increase and 500 block delays via zombie peer flood
- 88571 - [BC - High] missing zk tree leaf on the wormhole exit miner fee credit permanently freezes all miner exit fee revenue keyless account no exit path
- 89163 - [BC - High] miner volume fee is reported as paid but records no zk leaf so the credited fee is unrealizable by the miner
- 90398 - [BC - High] an unauthenticated attacker will force processing nodes to process unsigned wormhole mempool transactions beyond configured proposer limits
- 88568 - [BC - Low] missing collector storage weight in transactionfeescollector leads to a whole extrinsic undercharge of at least 16 7160
- 90377 - [BC - Low] stale transaction payment benchmark omits quantus fee collector storage undercharging the extension by 48 12 in the measured run
- 89154 - [BC - Medium] sparse public batches retain 742 exit weight for one exit letting an unsigned proof stuff 83 of the normal quota
- 88566 - [BC - High] pr 656 incomplete remediation bundle level rounding under settles per leaf wormhole fees
- 88540 - [BC - High] wormhole miner volume fees are permanently unclaimable because no zk leaf is created
- 90369 - [BC - Low] a failed enactment placement destroys an approved referendum s proposal so the voted root call never executes
- 88529 - [BC - Medium] incorrect base extrinsic weight for ml dsa 87 undercharges transaction verification by 70
- 88507 - [BC - Medium] missing guardian consent in set high security lets anyone permanently exhaust another account s guardian slots
- 90360 - [BC - Medium] unauthenticated 28 byte noise negotiation forces ml kem and ml dsa work before peer authentication
- 89139 - [BC - High] non quantized credits to wormhole addresses permanently lock sub quantum value
- 89137 - [BC - Medium] anyone can permanently exhaust any account s guardian slots for 0 032 unit blocking it from ever protecting another account
- 88485 - [BC - High] unverified nullifier public inputs bypass wormhole semantic txpool deduplication
- 89136 - [BC - Critical] missing deposit release calls in the high security whitelist permanently freeze reserved balances including an uninvolved third party s recovery deposit
- 89134 - [BC - High] miner volume fee credits lack zk tree leaves permanently freezing block author fees
- 90343 - [BC - Medium] txpool skips maintain on every finality event watched txs never see finalized and are falsely timed out after 512 blocks despite being finalized
- 89098 - [BC - Low] Multisig execute wraps transfers at zero proof-recording weight
- 90329 - [BC - High] pallet multisig propose decodes opaque inner calls without a depth limit trapping the block producer
- 88404 - [BC - High] preimage reference over drop in referenda enactment scheduling silently voids a passed governance decision
- 90235 - [BC - High] wormhole fee credits skip record transfer miner and aggregator volume fees are minted to keyless addresses with no zk tree leaf permanently freezing them
- 89091 - [BC - Medium] quantus adopts an sr25519 calibrated base weight for ml dsa signatures undercharging signed extrinsics by 79 58
- 90220 - [BC - Medium] dilithium signature verification is undercharged by stale base extrinsic weight
- 89077 - [BC - Low] incorrect genesis balance accounting in wormhole on initialize allows reserved locked funds to be exited as free balance leading to direct loss of funds and unauthorized minting
- 90210 - [BC - Medium] quantus s 36 772 transaction default crosses the 10 239 entry gossip cache causing repeated full peer disconnects and node resource amplification
- 90207 - [BC - Critical] missing zk tree leaf on the wormhole miner fee credit leads to permanent freezing of the block author s volume fee
- 88397 - [BC - Medium] self directed reversible transfers record wormhole zk tree leaves for credits that never happen
- 90180 - [BC - High] wormhole miner volume fee credits are uncollectible because no proof leaf is recorded
- 88386 - [BC - Medium] unsubscribe lifecycle bug bypasses txwatch rpc caps and increases full node resource use by 121
- 89065 - [BC - High] sub fee exitable wormhole deposits are accepted and recorded but can never be spent or exited permanently freezing user funds
- 90133 - [BC - High] mining rewards are minted at raw precision but their zk leaves commit only floor amount 0 01 quan permanently freezing every remainder and making ordinary fee yield wholly unc
- 89062 - [BC - High] remote unauthenticated block production dos fee free unverifiable wormhole exit proofs force unbounded failed zk verifications on every block producer up to the full 9s build budg
- 90047 - [BC - Medium] unbounded suri path depth bypasses max dev accounts via public light 2 genesisbuilder build state consuming 190 cpu seconds per 34 kb unauthenticated p2p request
- 89058 - [BC - High] pallet-multisig decodes an opaque inner call with no depth limit: a 4.8 KB nested blob traps the runtime before the weight guard can fire, so the work is never charged
- 89053 - [BC - High] wormhole miner volume fees are permanently unclaimable because the credit creates no zk tree leaf
- 89040 - [BC - High] wormhole miner fee credit records no zk tree leaf freezing miner yield
- 88329 - [BC - Medium] missing guardian consent in set high security lets one signer permanently exhaust any guardian s quota and block legitimate enrollments
- 89036 - [BC - High] unbounded unauthenticated pq handshakes permanently terminate node p2p networking and can halt network wide transaction confirmation
- 88300 - [BC - High] missing wormhole zk leaf permanently freezes all miner exit fee yield
- 88297 - [BC - High] scheduled transfers below the existential deposit strand the sender s funds with no owner accessible recovery
- 89009 - [BC - High] miner s share of the wormhole exit volume fee is credited to a keyless address with no zk leaf permanently freezing it
- 88290 - [BC - Insight] non canonical protobuf based peerid derivation in litep2p s noise handshake leads to reputation ban evasion in peerstore
- 89984 - [BC - High] missing zk tree registration for miner volume fees permanently freezes credited funds
- 89950 - [BC - High] process exit bundle never calls record transfer for miner fee every wormhole miner fee credit is permanently unspendable
- 89889 - [BC - Medium] permissionless vesting claim strands a schedule in an un terminable state blocking the treasury s clawback of the final tranche
- 89848 - [BC - Low] scheduled reversible transfer can become stuck in a held state after transfer keep alive failure pallet reversible transfers
- 88251 - [BC - Medium] the per extrinsic weight ledger undercharges by 91 9 the runtime inherits upstream substrate s sr25519 constant while verifying post quantum dilithium signatures in wasm
- 89832 - [BC - Critical] unbounded transaction tips bypass high security containment and drain compromised accounts
- 89819 - [BC - Critical] missing fips 204 domain separation in ml dsa transaction verification lets a victim s message signature authorize a transfer enabling direct theft of user funds
- 88969 - [BC - High] unbounded recursive decoding of opaque multisig calls makes block authors repeatedly execute unpaid mempool poison
- 88250 - [BC - High] one unauthenticated tcp burst permanently terminates a node s entire networking stack with no recovery short of a process restart
- 88951 - [BC - High] batch level fee rounding permanently strands fees locked by wormhole leaf proofs
- 88249 - [BC - Medium] extrinsicbaseweight is still upstream s sr25519 measurement after the switch to ml dsa so every signed extrinsic is charged 12 of what it costs
- 88243 - [BC - Insight] check wormhole path accepts any path shape and hdwallet exports no path constructor so the node cli and the mobile sdk derive different wormhole keys for the same index
- 88230 - [BC - Medium] pow seal verified in import block instead of the verifier bad seal blocks from a peer trigger an unpenalised sync restart loop stalling block import and mining
- 88943 - [BC - High] Residue truncation and two-leaf split in pallet-mining-rewards lead to permanent freezing of unclaimed miner yield
- 88227 - [BC - Medium] incomplete degenerate key filter in ml dsa verify var allows keyless signature forgery for a 63 value family of t1 coefficients
- 88939 - [BC - Medium] unauthenticated pq handshakes increase validator cpu consumption by 39 before peer authentication and established connection accounting
- 89762 - [BC - Medium] owner cancelling a reversible transfer mints an unbacked zk tree leaf permanent permissionless state growth
- 88226 - [BC - Medium] two unauthenticated bytes make a node commit 16 kib of resident memory in the pre handshake multistream select framing path
- 89733 - [BC - High] wormhole miner volume fee is credited to a keyless account without a zk tree leaf permanently freezing it
- 88938 - [BC - High] missing zk tree leaf record in the wormhole miner volume fee credit path leads to permanent freezing of funds
- 89689 - [BC - High] miner volume fee and aggregator rebate credits lack zk tree leaves permanently freezing funds
- 88224 - [BC - Medium] a peer advertising a forged block height suspends a victim node s mining and silently blackholes its block import notifications
- 88912 - [BC - High] missing record transfer in wormhole miner fee settlement permanently freezes unclaimed yield
- 88223 - [BC - High] miner volume fee and aggregator rebate are credited to keyless wormhole addresses with no zk tree leaf permanently freezing them incomplete fix of eq qnt wormhole f 03
- 88881 - [BC - High] wormhole miner volume fee is minted without its zk tree leaf permanently freezing every exit fee
- 88222 - [BC - Medium] one signer can permanently saturate any account s guardian enrollment capacity without consent using unfunded derivative origins
- 89613 - [BC - High] qpow import queue verifier does not check work so an anonymous peer holds an authority in major sync and halts its block production indefinitely at zero hash power
- 88872 - [BC - High] missing record transfer on the miner volume fee credit permanently freezes unclaimed miner yield on a non ml dsa signable qpow wormhole author
- 88855 - [BC - Medium] base extrinsic is substrate s stock sr25519 constant signed extrinsic is undercharged
- 88219 - [BC - Medium] Blocks with invalid proof-of-work carry no peer penalty: a hostile peer can force unlimited sync restarts and is re-admitted as a stranger every time
- 89552 - [BC - High] qpow miners will permanently freeze the sub quantum remainder of every block reward because mint reward credits full planck while hash leaf only commits floor amount 10 1
- 88841 - [BC - Critical] high security accounts are drained irreversibly through the transaction tip which no high security check in the runtime models the guardian delay cancel and recover funds are
- 89524 - [BC - Medium] retarget schedule silently reassigns a beneficiary s already vested funds to their replacement
- 88830 - [BC - Low] missing constraint private batch allows real outputs with canonical zero exit account
- 88218 - [BC - Medium] Per-extrinsic base weight is understated by 12.39×: the runtime inherits upstream Substrate's sr25519 constant while verifying post-quantum Dilithium signatures
- 89492 - [BC - Medium] mismatched dest can deposit check in fungible transfer leads to accepted transfers that credit nothing
- 88736 - [BC - Medium] missing pending handshake admission cap in the quantus pq noise stack lets unauthenticated peers force ml kem ml dsa work and 65 kb allocations per connection increasing node res
- 89475 - [BC - Low] missing zk tree leaf record in the miner volume fee mint leads to permanent freezing of the miner s fee share
- 88771 - [BC - High] wormhole miner volume fee is credited to a key less address with no zk tree leaf permanently freezing it
- 88768 - [BC - Medium] zero cost mempool flooding via fee free unsigned wormhole exit admission causes network processing nodes to process transactions beyond set parameters
- 89449 - [BC - High] mining rewards and fee credits mint more than their zk leaf commits stranding the difference at a keyless miner address
- 89448 - [BC - High] block authors are paid wormhole volume fees at a keyless address that no exit proof can unlock
- 89438 - [BC - Critical] miner controlled future timestamps bypass reversible transfer cancellation windows and cause direct loss of funds
- 89353 - [BC - Medium] unbounded pre auth pq noise setup saturates full node cpu before established peer limits apply
- 89348 - [BC - High] Mining reward's zk-tree leaf floors the amount, freezing the remainder
- 89347 - [BC - Critical] high security accounts can be drained immediately via an unbounded tip on a whitelisted call
Websites & Apps
- 89283 - [W&A - High] runtime metadata interpretation conflict in quantus sdk lets a multisig signer conceal transfer all and drain shared funds
- 90460 - [W&A - High] quantus pos accepts a replaceable pool transaction as payment before execution
- 88730 - [W&A - Critical] generated multiaddress index decodes unit as compact letting one signer hide transfer all in an authoritative 2 of 2 multisig proposal and drain the multisig
- 88667 - [W&A - High] unhandled call decode failure in the multisig approval sheet leads to direct theft of user funds
- 89188 - [W&A - Medium] official utxo pager orders only by block height skips a same height sibling and claim never sees that note
- 89151 - [W&A - High] primary only utility if else approval summary shows 1 quan while a 50 quan fallback drains the multisig
- 90351 - [W&A - High] the multisig approval screen signs call bytes it could not decode showing the signer a call name and no parameters
- 88483 - [W&A - High] official multisig approve displays a zero value call and still signs a full vault transfer
- 89095 - [W&A - High] android process death defeats recovery phrase clipboard expiry and exposes the mnemonic to later foreground apps
- 88382 - [W&A - Insight] wallet mnemonic stored with default ios keychain accessibility ksecattraccessiblewhenunlocked seed is backup extractable and not device bound
- 89999 - [W&A - Critical] multisig discovery accepts an indexer supplied address without verifying its derivation
- 88348 - [W&A - High] exponential synchronous decoding of a 213 byte utility if else proposal leaves the mobile wallet unable to render a frame or accept input whenever the affected multisig account loads
- 88305 - [W&A - Low] quantus sdk predicts a multisig address the chain never creates because its derivation omits the pallet s signer deduplication
- 89011 - [W&A - High] fail open runtime call decoding lets a minority multisig signer obtain approval for full balance theft
- 89987 - [W&A - High] multiaddress index is decoded at a different width by the sdk and the runtime letting a qr code display a harmless batch while signing a 1000 quan transfer to the attacker
- 89008 - [W&A - High] fail open multisig call decoding in the mobile app hides transfer all and enables theft of the full multisig balance
- 88274 - [W&A - Medium] with hide balance enabled a utility batch multisig proposal shows no transfer amount anywhere on the approval sheet while the same transfer unwrapped still shows it
- 89007 - [W&A - Critical] accessibility bypass of the wallet lock screen permits an unauthenticated sweep of the entire wormhole balance
- 88263 - [W&A - Low] a late check phrase lookup overwrites the current recipient s phrase so the send review screen vouches for an address the user is not paying
- 89809 - [W&A - Low] nested utility if else proposal forces exponential work in the official sdk and temporarily disables a victim s multisig view
- 89808 - [W&A - High] unit accountindex consumes zero runtime bytes while the sdk consumes the next field allowing one canonical approval to display no attacker transfer while transferring 999 999 qu
- 89806 - [W&A - High] frozen vesting decode failure leaves an opaque multisig approval actionable and allows a 999 999 quan drain
- 89802 - [W&A - Critical] missing chain identity validation in the quantus sdk signing path lets a malicious rpc endpoint obtain signatures valid on an unintended chain
- 89798 - [W&A - High] multisig review hides call parameters and enables a treasury drain
- 88914 - [W&A - High] hide balances masks executable multisig amounts enabling deceptive utility if else approvals
- 89657 - [W&A - High] validation gap in multisig confirmation allows approval of hidden transfer arguments
- 88221 - [W&A - Medium] unvalidated amount in the pay deep link freezes and crashes the wallet via unbounded bigint materialisation on the ui isolate
- 88851 - [W&A - High] exponential utility if else call display lets a multisig co signer persistently freeze the mobile wallet
- 88786 - [W&A - Medium] official quantus pos marks an attacker crafted rolled back batch all payment as received in violation of the node s documented integration requirement
- 89478 - [W&A - Medium] balance privacy display blanks the transfer amount in the multisig approval confirmation enabling blind co signer approval and direct theft of user funds
- 89322 - [W&A - Medium] call parsing in quantus sdk freezes mobile wallet