An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0.
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.
Summary
An inflation issue was discovered in Chia Network CAT1 Standard 1.0.0. Previously minted tokens minted on the Chia blockchain using the CAT1 standard can be inflated to an arbitrary extent by any holder of any amount of the token. The total amount of the token can be increased as high as the malicious actor pleases. This is true for every CAT1 on the Chia blockchain regardless of issuance rules. This attack is auditable on chain, so maliciously altered coins can potentially be marked by off-chain observers as malicious.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | chia-blockchain (PyPI) | up to 2.4.4rc3 | — | No fix listed | GHSA-pvjg-jwp3-mrj5 |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- chia-blockchain (PyPI) Vendor— Affected up to 2.4.4rc3 Fixed in — No fix listed GHSA-pvjg-jwp3-mrj5
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2022-36447
- 2026-10-03 Alias added: GHSA-pvjg-jwp3-mrj5
References
Sources
- CVE-2022-36447 · CVE Program
- CVE-2022-36447 · NVD
- FIRST EPSS
- GHSA-pvjg-jwp3-mrj5 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences