{"id":"GHSA-rj53-j6jw-7f7g","aliases":["GO-2025-3801"],"url":"https://o3.security/vulnerability/GHSA-rj53-j6jw-7f7g","summary":"Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary","details":"### Summary\n\nSending a message that modifies the validator set at the epoch boundary halts the chain.\n\n### Impact\n\nDenial of Service - Comos-sdk prevents modifying the validator set from two different modules - https://github.com/cosmos/cosmos-sdk/blob/release/v0.50.x/types/module/module.go#L811. Such an operation leads to panic and chain halt.\n\n### Detailed Post mortem\n\nhttps://boiling-lake-106.notion.site/2025-06-18-Genesis-mainnet-chain-halt-post-mortem-229f60cc1b5f80b7adf5e3ea0541ea87","published":"2025-07-08T19:09:11Z","modified":"2025-07-28T20:42:21.065772Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Go","name":"github.com/babylonlabs-io/babylon/v2","fixedVersion":"2.1.0"}],"fix":{"url":"https://github.com/babylonlabs-io/babylon/pull/1244/files","label":"babylonlabs-io/babylon#1244"},"references":[{"type":"WEB","url":"https://github.com/babylonlabs-io/babylon/security/advisories/GHSA-rj53-j6jw-7f7g"},{"type":"WEB","url":"https://github.com/babylonlabs-io/babylon/pull/1244/files"},{"type":"WEB","url":"https://boiling-lake-106.notion.site/2025-06-18-Babylon-Genesis-Chain-Halt-Post-Mortem-229f60cc1b5f80b7adf5e3ea0541ea87"},{"type":"PACKAGE","url":"https://github.com/babylonlabs-io/babylon"},{"type":"WEB","url":"https://github.com/babylonlabs-io/babylon/releases/tag/v2.1.0"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-07-28T20:42:21.065772Z"}}