Executive brief
Babylon's malformed vote extensions are not rejected
Affected products
- Go github.com/babylonlabs-io/babylon/v4
Junglewise Threat Intelligence
Babylon's malformed vote extensions are not rejected
Severity: medium · CVSS 4 · Published 2025-11-24
Technologies: github.com/babylonlabs-io/babylon/v4 (Go). Vendors: Go.
Related threats
- GO-2025-4214 - Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond in github.com/babylonlabs
- GO-2025-4211 - Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers in github.com/babylonlabs-io/babylon
- Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond
- Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers
- GO-2025-4159 - Babylon's BIP322 signature implementation is not fully compliant to the spec in github.com/babylonlabs-io/babylon