Headline
GHSA-869w-47c6-fq8q: Babylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt
Summary
Minting large amount of tokens through ibc transfer and then depositing them in validator rewards pool (via DepositValidatorRewardsPool message) can lead to integer overflow panic when calculating cumulative_reward_ratio for the validator.
This calculation happens in x/epoching module EndBlocker, thus the panic will halt the chain.
Impact
Denial of Service - Due to panic in the EndBlocker Babylon Genesis will halt
- GitHub Advisory Database
- GitHub Reviewed
- GHSA-869w-47c6-fq8q
Babylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt
High severity GitHub Reviewed Published May 13, 2025 in babylonlabs-io/babylon • Updated May 15, 2025
Package
gomod github.com/babylonlabs-io/babylon (Go)
Affected versions
<= 1.0.2
Summary
Minting large amount of tokens through ibc transfer and then depositing them in validator rewards pool (via DepositValidatorRewardsPool message) can lead to integer overflow panic when calculating cumulative_reward_ratio for the validator.
This calculation happens in x/epoching module EndBlocker, thus the panic will halt the chain.
Impact
Denial of Service - Due to panic in the EndBlocker Babylon Genesis will halt
References
- GHSA-869w-47c6-fq8q
Published to the GitHub Advisory Database
May 15, 2025
Last updated
May 15, 2025