Read the docs
TI-2025-43701 Aliases GHSA-rj53-j6jw-7f7g

Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary

Priority LOW 38CWE-754Published · Updated

Key facts

Attack vector
—
Privileges required
—
User interaction
—
Attack complexity
—
Impact type
—
Confidentiality · integrity · availability
—
Fix status
Fixed

No CVSS vector from any source. Fix status from GitHub.

Summary

### Summary Sending a message that modifies the validator set at the epoch boundary halts the chain. ### Impact Denial of Service - Comos-sdk prevents modifying the validator set from two different modules - https://github.com/cosmos/cosmos-sdk/blob/release/v0.50.x/types/module/module.go#L811. Such an operation leads to panic and chain halt. ### Detailed Post mortem https://boiling-lake-106.notion.site/2025-06-18-Genesis-mainnet-chain-halt-post-mortem-229f60cc1b5f80b7adf5e3ea0541ea87

Why it matters now

Fix Fixed github.com/babylonlabs-io/babylon/v2 (Go): 2.1.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—github.com/babylonlabs-io/babylon/v2 (Go)2.0.0 to before 2.1.02.1.0Patch availableGHSA-rj53-j6jw-7f7g
  • github.com/babylonlabs-io/babylon/v2 (Go) Vendor— Affected 2.0.0 to before 2.1.0 Fixed in 2.1.0 Patch available GHSA-rj53-j6jw-7f7g

Remediation

  • Fix · GHSA-rj53-j6jw-7f7g github.com/babylonlabs-io/babylon/v2 (Go) Fixed in 2.1.0 Advisory →

Timeline

  1. 2026-10-03 Threatist record created from GHSA-rj53-j6jw-7f7g

References

Other 5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences