# CVE-2026-57445: Gardens v2 escrow drainage in dispute resolution

Source: https://junglewise.ai/threats/cve-2026-57445-gardens-v2-escrow-drainage-in-dispute-resolution  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-03. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-57445 · Severity: info · CVSS 0 · Published 2026-09-03

Gardens v2 is a governance framework used for community decision-making through customizable voting pools. A vulnerability in its dispute resolution process allows beneficiaries to withdraw the entire escrow reserve for active streaming proposals when disputes are resolved in their favor, instead of preserving the portion that should remain locked for the active stream. This could enable unauthorized fund withdrawal that violates the intended escrow protection.

Technologies: [1Hive Gardens v2](https://junglewise.ai/threats/technologies/gardens-v2). Vendors: [1Hive](https://junglewise.ai/threats/vendors/1hive).

## Quick answers

**Is CVE-2026-57445 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-57445 being exploited in the wild.

**How severe is CVE-2026-57445?** Informational severity, with a CVSS score of 0, published 3 September 2026.

**Which products and versions are affected?** 1Hive Gardens v2 commit dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior.

**Is there a fix for CVE-2026-57445?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-57445 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-57445?** Check whether you run 1Hive Gardens v2 at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability exists in the approve-side dispute resolution path of StreamingEscrow. When a disputed streaming proposal is resolved as approved (or times out with defaultRuling == 1), CVDisputeFacet.rule() calls _handleStreamingResolution(..., true), which clears the disputed flag and then invokes drainToBeneficiary(). This function transfers the full escrow balance to the beneficiary, whereas normal payout paths (claim() and syncOutflow()) preserve the depositAmount() reserve needed for the active stream. The vulnerable code path in StreamingEscrow._drainTo() lacks the reserve-preserving logic present in _drainExcessToBeneficiary(). Attack preconditions require an active streaming proposal with an active dispute that resolves favorably to the beneficiary. The issue survives through the strategy-controlled CVDisputeFacet.rule() code path and was discovered through source code review with no exploit verification.

## Affected products

- 1Hive Gardens v2 commit dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior

## Timeline

- 2026-06-17: disclosed
- 2026-09-03: advisory

## References

- [https://github.com/1Hive/gardens-v2/security/advisories/GHSA-3xpr-2mm7-77j7](https://github.com/1Hive/gardens-v2/security/advisories/GHSA-3xpr-2mm7-77j7)

## Related threats

- [1Hive Gardens v2 fund drainage in streaming escrow on proposal cancellation](https://junglewise.ai/threats/cve-2026-55658-1hive-gardens-v2-fund-drainage-in-streaming-escrow-on-proposal)
- [1Hive Gardens v2 unauthorized fund transfer in StreamingEscrow](https://junglewise.ai/threats/cve-2026-53924-1hive-gardens-v2-unauthorized-fund-transfer-in-streamingescrow)