CVE-2021-25837 PoC — Cosmos Network Ethermint 安全漏洞

Source

https://github.com/iczc/Ethermint-CVE-2021-25837

Associated Vulnerability

Title:Cosmos Network Ethermint 安全漏洞 (CVE-2021-25837)
Description:Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. Due to the inconsistency between the Storage caching cycle and the Tx processing cycle, Storage changes caused by a failed transaction are improperly reserved in memory. Although the bad storage cache data will be discarded at EndBlock, it is still valid in the current block, which enables many possible attacks such as an "arbitrary mint token".

Readme

# Ethermint-CVE-2021-25837

File Snapshot


 [4.0K]  /data/pocs/61b636e011db42002ba64ca1767b96b5e242de20
├── [ 903]  docker-compose.yml
├── [4.0K]  ethermint
├── [4.0K]  genesis
│   ├── [4.0K]  config
│   │   ├── [1.5K]  app.toml
│   │   ├── [ 11K]  config.toml
│   │   ├── [6.6K]  genesis.json
│   │   ├── [4.0K]  gentx
│   │   │   └── [ 961]  gentx-6b6f714a220a4b4c8050273382a7c5c5319bac29.json
│   │   ├── [ 148]  node_key.json
│   │   └── [ 345]  priv_validator_key.json
│   └── [4.0K]  data
│       └── [  48]  priv_validator_state.json
├── [ 444]  mykey.json
├── [  26]  README.md
└── [ 757]  setup_ethermintcli.sh

5 directories, 11 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!