Junglewise Threat Intelligence

GO-2025-4214 - Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond in github.com/babylonlabs

Severity: info · Published 2025-12-15

Technologies: github.com/babylonlabs-io/babylon/v4 (Go), github.com/babylonlabs-io/babylon/v3 (Go), github.com/babylonlabs-io/babylon/v2 (Go), github.com/babylonlabs-io/babylon (Go). Vendors: Go.

Executive brief

Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond in github.com/babylonlabs-io/babylon

Affected products

  • Go github.com/babylonlabs-io/babylon/v4
  • Go github.com/babylonlabs-io/babylon/v3
  • Go github.com/babylonlabs-io/babylon/v2
  • Go github.com/babylonlabs-io/babylon

Related threats