Affected by GO-2025-3686
and 7 other vulnerabilities
GO-2025-3686: Babylon Finality Provider `MsgCommitPubRandList` replay attack in github.com/babylonlabs-io/babylon
GO-2025-3687: Babylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt in github.com/babylonlabs-io/babylon
GO-2025-3791: Babylon vulnerable to chain half when transaction has fees different than `ubbn` in github.com/babylonlabs-io/babylon
GO-2025-3801: Babylon vulnerable to chain halt when a message modifies the validator set at the epoch boundary in github.com/babylonlabs-io/babylon
GO-2025-4157: Babylon's malformed vote extensions are not rejected in github.com/babylonlabs-io/babylon
GO-2025-4159: Babylon's BIP322 signature implementation is not fully compliant to the spec in github.com/babylonlabs-io/babylon
GO-2025-4211: Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers in github.com/babylonlabs-io/babylon
GO-2025-4214: Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond in github.com/babylonlabs-io/babylon