MEDIUMGo
GHSA-4rmq-mc2c-r495· GO-2025-4214Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond
Modified: 12/15/2025
package
Go/github.com/babylonlabs-io/babylon/v3
pkg:go/github.com/babylonlabs-io/babylon/v3
HIGHGo
GHSA-m6wq-66p2-c8pc· GO-2025-4211Babylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers
Modified: 12/17/2025
—Go
GO-2025-4157· GHSA-2fcv-qww3-9v6hBabylon's malformed vote extensions are not rejected in github.com/babylonlabs-io/babylon
Modified: 3/3/2026
—Go
GO-2025-4159· GHSA-xq4h-wqm2-668wBabylon's BIP322 signature implementation is not fully compliant to the spec in github.com/babylonlabs-io/babylon
Modified: 3/3/2026
—Go
GO-2025-4211· GHSA-m6wq-66p2-c8pcBabylon Nil BlockHash in BLS vote extensions triggers panics in consensus handlers in github.com/babylonlabs-io/babylon
Modified: 3/3/2026
—Go
GO-2025-4214· GHSA-4rmq-mc2c-r495Babylon Incorrect FP inactive accounting in costaking creates “phantom stake” that earns rewards after BTC unbond in github.com/babylonlabs-io/babylon
Modified: 3/3/2026