Denys Pakizh
Summary: Trail of Bits researchers Paweł Płatek and Denys Pakizh found and reported a bug in Provenance Blockchain, a public proof-of-stake chain built on Cosmos SDK, that lets any user grant themselves admin control over marker accounts without holding a single token. The post, dated August 25, 2026, describes the issue as state divergence enabling unauthorized access.
Bottom line: A flaw that hands admin control of marker accounts to anyone holding zero tokens turns account ownership into an assumption rather than a control, and it sat in a public proof-of-stake chain until researchers reported it.
Read the original at Trail of Bits Blog ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026