State divergence enables unauthorized access
Summary: Trail of Bits found a bug in Provenance Blockchain, a Cosmos SDK proof-of-stake chain, that let any user grant themselves admin control over marker accounts without holding any tokens, affecting 82 markers representing live financial assets on mainnet. The bug, present in versions before 1.28.0, was found in March 2026 and reported April 1, mitigated in PR #2627 shipped in v1.28.0 on May 1, 2026, and fully fixed in PR #2734 shipped in v1.29.0 on June 8, 2026.
What you should know: The authorization check compared a stored supply field that stays zero for non-fixed markers against the caller's balance, so 0 == 0 passed for any attacker with zero tokens, and the affected markers held roughly 30 x 10^15 nhash in escrow, around $500,000 at the time of discovery.
Read the original at Trail of Bits Blog ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026