Terms of Use_Privacy Policy_Disclaimers_

Stop the Chain! CosmWasm Stack Overflow

Felix Wilhelm

Jun 01 2023 _ 1 min read

This post announces a vulnerability we discovered in CosmWasm, a smart contract platform written for the Cosmos ecosystem. The vulnerability was a stack overflow, which would have allowed users who can upload new smart contracts on Cosmos-based blockchains to halt those chains fully.

Jump Crypto aims to boost security assurance across the crypto ecosystem through ongoing research and coordinated disclosure to identify and patch vulnerabilities across various projects. This announcement is yet another example of how we continue these efforts.

You can find more details about this vulnerability in our markdown advisory or the CosmWasm Advisory.

We would like to thank the CosmWasm contributors and the downstream-affected Cosmos L1s for their professional handling of this issue and quick adoption of the patch. Thanks to their partnership, this bug was addressed without any user impact.

Stay up to date with the latest from Jump_

SAFU: Creating a Standard for Whitehats

Whitehats and DeFi protocols need a shared understanding of security policy. We propose the SAFU - Simple Arrangement for Funding Upload - as a versatile and credible way to let whitehats know what to...

Oct 24 2022 _ 17 min

Huckleberry: IBC Event Hallucinations

This blog post describes a vulnerability in ibc-go, the reference implementation of the Interblockchain Communication Protocol (IBC) used by most Cosmos blockchains

Sep 06 2023 _ 4 min

Mapping Markets: Evaluating Blockchain’s Mass Adoption Potential

In this post, we propose a geographically-oriented framework, which we call “Pueyo Maps” (inspired by Tomas Pueyo’s geo-history), as a way of evaluating the long-term suitability of blockchain-based s...

Jun 05 2023 _ 20 min

Disclaimer

The information on this website and on the Brick by Brick podcast or Ship Show Twitter spaces is provided for informational, educational, and entertainment purposes only. This information is not intended to be and does not constitute financial advice, investment advice, trading advice, or any other type of advice. You should not make any decision – financial, investment, trading or otherwise – based on any of the information presented here without undertaking your own due diligence and consulting with a financial adviser. Trading, including that of digital assets or cryptocurrency, has potential rewards as well as potential risks involved. Trading may not be suitable for all individuals. Recordings of podcast episodes or Twitter spaces events may be used in the future.