Non évaluée
UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt
CVE-2026-40583
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com
- patch github.com