> CVE-2025-61595

« BACK_TO_HOME
PUBLISHED
2025-10-02 20:15
MODIFIED
2025-10-06 14:57
EPSS (Prob. Exploit)
0.33%
Top 74.3%
DATA SOURCES:
NVD 🔗 2025-10-18 CVE PROJECT 🔗 2026-01-19 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-04 OSV 🔗 2026-09-13

> DESCRIPTION

MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract, potentially amplifying the gas consumption exponentially. This is fixed in version 4.0.2.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-qwvm-wqq8-8j69 HIGH

github.com/MANTRA-Chain/mantrachain/x/tokenfactory tx gas limit is not enforced in send hooks

AFFECTED PACKAGES:
GO / github.com/MANTRA-Chain/mantrachain
< 4.0.2
GO / github.com/MANTRA-Chain/mantrachain/v2
< 4.0.2
GO / github.com/MANTRA-Chain/mantrachain/v3
< 4.0.2
GO / github.com/MANTRA-Chain/mantrachain/v4
< 4.0.2
Fixed in: 4.0.2

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

MANTRA tx gas limit is not enforced in send hooks

AFFECTED PACKAGES:
Unknown / Unknown
16 versions affected
ALIASES:
GHSA-qwvm-wqq8-8j69, GO-2025-3997

> HISTORIQUE DES MODIFICATIONS

Première apparition
02/10/2025 20:15
Source: NVD
📊 ENRICHISSEMENT 18/10/2025 15:08
CVEPROJECT
Champ modifié: CVE Project
Ancienne valeur:
Non
Nouvelle valeur:
Oui
Total des modifications: 1 Dernière mise à jour: 1 year ago
« BACK_TO_HOME