Go/github.com/cosmos/cosmos-sdk

Cosmos-SDK Cosmovisor component may be vulnerable to denial of service

Modified: 9/10/2026

ASA-2024-002: Default `PrepareProposalHandler` may produce invalid proposals when used with default `SenderNonceMempool`

Modified: 5/23/2024

Authz Module Non-Determinism

Modified: 7/8/2026

Cosmos SDK: x/group can halt when erroring in EndBlocker

Modified: 8/20/2025

ASA-2024-003: Missing `BlockedAddressed` Validation in Vesting Module

Modified: 7/2/2024

ASA-2024-005: Potential slashing evasion during re-delegation

Modified: 11/4/2024

ASA-2024-0012, ASA-2024-0013: CosmosSDK: Transaction decoding may result in a stack overflow or resource exhaustion

Modified: 12/23/2024

ASA-2024-006: ValidateVoteExtensions helper function in Cosmos SDK may allow incorrect voting power assumptions

Modified: 5/10/2024

Barberry Security Advisory - regarding x/auth periodic vesting accounts

Modified: 11/8/2023

Cosmos SDK's Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt

Modified: 7/28/2025

Go package github.com/cosmos/cosmos-sdk module x/crisis does NOT cause chain halt

Modified: 11/8/2023

github.com/cosmos/cosmos-sdk's x/crisis does not charge ConstantFee

Modified: 11/8/2023

Cosmos SDK: Groups module can halt chain when handling a malicious proposal

Modified: 3/3/2025

The x/crisis package does not cause chain halt in github.com/cosmos/cosmos-sdk

Modified: 5/20/2024

Cosmos "Barberry" vulnerability in github.com/cosmos/cosmos-sdk

Modified: 5/20/2024

The x/crisis package does not charge ConstantFee in github.com/cosmos/cosmos-sdk

Modified: 5/20/2024

Invalid block proposal in github.com/cosmos/cosmos-sdk

Modified: 5/23/2024

Missing BlockedAddressed Validation in Vesting Module in github.com/cosmos/cosmos-sdk

Modified: 7/1/2024

Slashing evasion in github.com/cosmos/cosmos-sdk

Modified: 5/20/2024

ValidateVoteExtensions function in Cosmos SDK may allow incorrect voting power assumptions in github.com/cosmos/cosmos-sdk

Modified: 5/20/2024

Transaction decoding may result in a stack overflow or resource exhaustion in github.com/cosmos/cosmos-sdk

Modified: 12/20/2024

Cosmos SDK: Groups module can halt chain when handling a malicious proposal in github.com/cosmos/cosmos-sdk

Modified: 3/3/2025

Cosmos SDK can halt when erroring in EndBlocker in github.com/cosmos/cosmos-sdk/

Modified: 3/18/2025

Integer Overflow vulnerability in its Validator Rewards pool can cause a chain halt in github.com/cosmos/cosmos-sdk

Modified: 7/28/2025