Executive brief
Babylon Finality Provider `MsgCommitPubRandList` replay attack in github.com/babylonlabs-io/babylon
Affected products
- Go github.com/babylonlabs-io/babylon
Junglewise Threat Intelligence
GO-2025-3686 - Babylon Finality Provider `MsgCommitPubRandList` replay attack in github.com/babylonlabs-io/babylon
Severity: info · Published 2025-05-15
Technologies: github.com/babylonlabs-io/babylon (Go). Vendors: Go.
Related threats
- GO-2025-4214 - Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond in github.com/babylonlabs
- GO-2025-4211 - Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers in github.com/babylonlabs-io/babylon
- Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond
- Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers
- GO-2025-4159 - Babylon's BIP322 signature implementation is not fully compliant to the spec in github.com/babylonlabs-io/babylon