Jump Crypto finds double-voting vulnerability in Celer’s SGN By Cointelegraph

[ad_1]



Web3 investor and developer Jump Crypto has identified a vulnerability in Celer’s State Guardian Network (SGN) that would allow malicious validators to compromise the network and applications dependent on it, including Celer’s cBridge.

According to Jump Crypto’s postmortem report, validators were allowed to vote more than once on the same update due to a bug in the SGN EndBlocker code. By allowing validators to vote multiple times, malicious actors could multiply their voting power to approve harmful updates. The report explained:

Screenshot of the postmortem report showing validators’ ability to apply malicious updates on Celer’s network due to the bug. Source: Jump Crypto