# Security

**URL:** https://forum.cosmos.network/c/conversation/security/19.md?page=1

[Latest](https://forum.cosmos.network/latest.md) · [Categories](https://forum.cosmos.network/categories.md) · [Tags](https://forum.cosmos.network/tags.md)

**Page:** 2

---

## [IBC compared to chainlink CCIP (Anti-Fraud Network overlay)](https://forum.cosmos.network/t/ibc-compared-to-chainlink-ccip-anti-fraud-network-overlay/7731)

<div class="topic-metadata">

**Author:** [@cryptoNFT](https://forum.cosmos.network/u/cryptoNFT)\
**Replies:** 0\
**Last updated:** [October 14, 2022, 4:59am UTC](https://forum.cosmos.network/t/ibc-compared-to-chainlink-ccip-anti-fraud-network-overlay/7731 "2022-10-14T04:59:14Z")

</div>

was looking at CCIP which seems to be chainlinks version of IBC to state it roughly. chain dot link/cross-chain It does have an AFN (anti fraud network) overlay. I was wondering if future IBC will incorporate somethin…

---

## [Cosmos-SDK Security Advisory Dragonfruit](https://forum.cosmos.network/t/cosmos-sdk-security-advisory-dragonfruit/7614)

<div class="topic-metadata">

**Author:** [@ebuchman](https://forum.cosmos.network/u/ebuchman)\
**Replies:** 1\
**Last updated:** [October 8, 2022, 10:36pm UTC](https://forum.cosmos.network/t/cosmos-sdk-security-advisory-dragonfruit/7614 "2022-10-08T22:36:43Z")

</div>

Recently, the core Cosmos team became aware of a high-severity security vulnerability that impacts all users of the IAVL merkle proof verification (“RangeProof”) system, for all versions of the IAVL software. Details wer…

---

## [Make cosmosSDK new blockchain Solidity compatible](https://forum.cosmos.network/t/make-cosmossdk-new-blockchain-solidity-compatible/6854)

<div class="topic-metadata">

**Author:** [@aakash\_singh\_rajput](https://forum.cosmos.network/u/aakash_singh_rajput)\
**Replies:** 0\
**Last updated:** [July 5, 2022, 11:09am UTC](https://forum.cosmos.network/t/make-cosmossdk-new-blockchain-solidity-compatible/6854 "2022-07-05T11:09:33Z")

</div>

how to make new Blockchain solidity/SmartContract compatible ? I am using CosmosSDK \> Ignite and working on Ubuntu

---

## [Help me flag this video](https://forum.cosmos.network/t/help-me-flag-this-video/7270)

<div class="topic-metadata">

**Author:** [@ANIMALOUKOS](https://forum.cosmos.network/u/ANIMALOUKOS)\
**Replies:** 0\
**Last updated:** [September 19, 2022, 8:22pm UTC](https://forum.cosmos.network/t/help-me-flag-this-video/7270 "2022-09-19T20:22:28Z")

</div>

Man how I can not post link I can not post image how I will warn you is this website \` Is atom stackers target most, I spoke Bakery swap they don’t care. Every Fruit is against the hole crypto movement

---

## [Cosmos-SDK Security Advisory Pineapple](https://forum.cosmos.network/t/cosmos-sdk-security-advisory-pineapple/6061)

<div class="topic-metadata">

**Author:** [@CarlosRodriguez](https://forum.cosmos.network/u/CarlosRodriguez)\
**Replies:** 2\
**Last updated:** [May 19, 2022, 12:57am UTC](https://forum.cosmos.network/t/cosmos-sdk-security-advisory-pineapple/6061 "2022-05-19T00:57:46Z")

</div>

Recently, the core Cosmos development team became aware of a potential security vulnerability impacting IBC in Cosmos-SDK 0.42.x and ibc-go v1.x.x and v2.x.x. The bug appears to be low-severity in general but may be high…

---

## [ATOM STOLEN - Help w/ Unstaking PLEASE](https://forum.cosmos.network/t/atom-stolen-help-w-unstaking-please/4600)

<div class="topic-metadata">

**Author:** [@jvh123](https://forum.cosmos.network/u/jvh123)\
**Replies:** 8\
**Last updated:** [April 3, 2022, 8:28am UTC](https://forum.cosmos.network/t/atom-stolen-help-w-unstaking-please/4600 "2022-04-03T08:28:46Z")

</div>

Hi there, I’m new to cryptocurrency, and through an unfortunate set of circumstances, I fell victim to a scam where I revealed the 12 digit passcode/seed phrase through a fake bullshit website (on Exodus). Please spare …

---

## [Cosmos-SDK Vulnerability Retrospective: Security Advisory Jackfruit, October 12, 2021](https://forum.cosmos.network/t/cosmos-sdk-vulnerability-retrospective-security-advisory-jackfruit-october-12-2021/5349)

<div class="topic-metadata">

**Author:** [@ebuchman](https://forum.cosmos.network/u/ebuchman)\
**Replies:** 0\
**Last updated:** [October 19, 2021, 3:52pm UTC](https://forum.cosmos.network/t/cosmos-sdk-vulnerability-retrospective-security-advisory-jackfruit-october-12-2021/5349 "2021-10-19T15:52:21Z")

</div>

On October 8, 2021, the team at Provenance reported a high-severity vulnerability in v0.43.x and v0.44.{0,1} of the Cosmos-SDK. On October 12, 2021, a security patch was released in v0.44.2 of the Cosmos-SDK that address…

---

## [Cosmos-SDK Security Advisory Jackfruit](https://forum.cosmos.network/t/cosmos-sdk-security-advisory-jackfruit/5319)

<div class="topic-metadata">

**Author:** [@ebuchman](https://forum.cosmos.network/u/ebuchman)\
**Replies:** 1\
**Last updated:** [October 12, 2021, 2:54pm UTC](https://forum.cosmos.network/t/cosmos-sdk-security-advisory-jackfruit/5319 "2021-10-12T14:54:40Z")

</div>

Recently, the Cosmos-SDK team became aware of a high-severity security vulnerability that impacts Cosmos-SDK v0.43.x and v0.44.x. User funds are NOT at risk; however, the vulnerability can result in a chain halt. This vu…

---

## [Tendermint Core Security Advisory Alderfly](https://forum.cosmos.network/t/tendermint-core-security-advisory-alderfly/4605)

<div class="topic-metadata">

**Author:** [@tessr](https://forum.cosmos.network/u/tessr)\
**Replies:** 3\
**Last updated:** [April 15, 2021, 9:25pm UTC](https://forum.cosmos.network/t/tendermint-core-security-advisory-alderfly/4605 "2021-04-15T21:25:44Z")

</div>

Recently, a high-severity security vulnerability that impacts the Tendermint light client was reported to the Tendermint bug bounty program. A patch for the issue, which includes no breaking changes, will be released in …

---

## [Tendermint Core Vulnerability Retrospective: Security Advisory Mulberry, January 19, 2021](https://forum.cosmos.network/t/tendermint-core-vulnerability-retrospective-security-advisory-mulberry-january-19-2021/4336)

<div class="topic-metadata">

**Author:** [@tessr](https://forum.cosmos.network/u/tessr)\
**Replies:** 1\
**Last updated:** [January 29, 2021, 8:32pm UTC](https://forum.cosmos.network/t/tendermint-core-vulnerability-retrospective-security-advisory-mulberry-january-19-2021/4336 "2021-01-29T20:32:42Z")

</div>

On January 8, 2021, the team at Crypto.com reported a medium security vulnerability (“Denial of Service 1”) to the team via security@tendermint.com. On January 12, the Tendermint Core team released v0.34.2, with a patch …

---

## [Tendermint Core Security Advisory Mulberry](https://forum.cosmos.network/t/tendermint-core-security-advisory-mulberry/4309)

<div class="topic-metadata">

**Author:** [@tessr](https://forum.cosmos.network/u/tessr)\
**Replies:** 3\
**Last updated:** [January 25, 2021, 12:17pm UTC](https://forum.cosmos.network/t/tendermint-core-security-advisory-mulberry/4309 "2021-01-25T12:17:08Z")

</div>

Recently, the Tendermint Core team became aware of a high-severity security vulnerability that impacts Tendermint Core v0.34.0 and later. A patch for the issue, which requires no breaking changes, will be released in ver…

---

## [Security Incident Report: qa.cosmos.network subdomain takeover](https://forum.cosmos.network/t/security-incident-report-qa-cosmos-network-subdomain-takeover/3982)

<div class="topic-metadata">

**Author:** [@alessio](https://forum.cosmos.network/u/alessio)\
**Replies:** 0\
**Last updated:** [September 17, 2020, 1:32pm UTC](https://forum.cosmos.network/t/security-incident-report-qa-cosmos-network-subdomain-takeover/3982 "2020-09-17T13:32:15Z")

</div>

On September 16th, an independent security researcher made contact with us via the security@tendermint.com email address and reported a security breach (subdomain takeover) affecting our DNS. We’ve promptly filed a low…

---

## [Vulnerability Coordination Retrospective: Tendermint Core Security Advisory Syringa, 2020-07-02](https://forum.cosmos.network/t/vulnerability-coordination-retrospective-tendermint-core-security-advisory-syringa-2020-07-02/3769)

<div class="topic-metadata">

**Author:** [@tessr](https://forum.cosmos.network/u/tessr)\
**Replies:** 0\
**Last updated:** [July 9, 2020, 9:02am UTC](https://forum.cosmos.network/t/vulnerability-coordination-retrospective-tendermint-core-security-advisory-syringa-2020-07-02/3769 "2020-07-09T09:02:55Z")

</div>

On June 28, 2020, the Tendermint Core team identified a pair of bugs which, when exploited, could be used to halt networks running Tendermint Core 0.33 or later. On July 2, 2020, at 14:00 UTC, Tendermint Core version 0.3…

---

## [Tendermint Core Security Advisory Syringa](https://forum.cosmos.network/t/tendermint-core-security-advisory-syringa/3741)

<div class="topic-metadata">

**Author:** [@tessr](https://forum.cosmos.network/u/tessr)\
**Replies:** 1\
**Last updated:** [July 2, 2020, 3:05pm UTC](https://forum.cosmos.network/t/tendermint-core-security-advisory-syringa/3741 "2020-07-02T15:05:05Z")

</div>

Recently, a pair of security vulnerabilities was discovered in Tendermint Core 0.33. One of the vulnerabilities is a high-security issue. A patch for these issues, which requires no breaking changes, will be released in …

---

## [Vulnerability Coordination Retrospective: Cosmos Mainnet Security Advisory Lavender, 2020-04-09](https://forum.cosmos.network/t/vulnerability-coordination-retrospective-cosmos-mainnet-security-advisory-lavender-2020-04-09/3550)

<div class="topic-metadata">

**Author:** [@tessr](https://forum.cosmos.network/u/tessr)\
**Replies:** 0\
**Last updated:** [April 16, 2020, 2:19pm UTC](https://forum.cosmos.network/t/vulnerability-coordination-retrospective-cosmos-mainnet-security-advisory-lavender-2020-04-09/3550 "2020-04-16T14:19:47Z")

</div>

In March 2020, a high-severity security vulnerability impacting all versions of Tendermint Core was reported through the Tendermint Bug Bounty program. On April 9, 2020, at 14:00 UTC, Tendermint Core versions 0.33.3, 0.3…

---

## [Cosmos Mainnet Security Advisory Lavender ](https://forum.cosmos.network/t/cosmos-mainnet-security-advisory-lavender/3511)

<div class="topic-metadata">

**Author:** [@tessr](https://forum.cosmos.network/u/tessr)\
**Replies:** 7\
**Last updated:** [April 10, 2020, 12:16pm UTC](https://forum.cosmos.network/t/cosmos-mainnet-security-advisory-lavender/3511 "2020-04-10T12:16:09Z")

</div>

Recently, a high-severity security vulnerability that impacts all versions of Tendermint was reported to the Tendermint bug bounty program. A patch for the issue, which requires no breaking changes, will be released in v…

---

## [Will transactions without fees constitute a dust attack?](https://forum.cosmos.network/t/will-transactions-without-fees-constitute-a-dust-attack/3411)

<div class="topic-metadata">

**Author:** [@niuniu](https://forum.cosmos.network/u/niuniu)\
**Replies:** 0\
**Last updated:** [March 16, 2020, 5:06am UTC](https://forum.cosmos.network/t/will-transactions-without-fees-constitute-a-dust-attack/3411 "2020-03-16T05:06:52Z")

</div>

Now the transfer can set 0 fee. Similar problems have been encountered on tezos network before, and tezos has been upgraded. If I use the program to send transactions to cosmos mainnet in batches, will this pose a prob…

---

## [Signup/Login problem to https://forum.cosmos.network](https://forum.cosmos.network/t/signup-login-problem-to-https-forum-cosmos-network/3089)

<div class="topic-metadata">

**Author:** [@1GLENCo](https://forum.cosmos.network/u/1GLENCo)\
**Replies:** 0\
**Last updated:** [December 24, 2019, 10:57am UTC](https://forum.cosmos.network/t/signup-login-problem-to-https-forum-cosmos-network/3089 "2019-12-24T10:57:28Z")

</div>

I’m brand new to Cosmos. The first thing I tried to do when I found forum.cosmos.network was click the “Sign Up” button that I saw. I use both Google and Github, so in theory, I should be able to log in with either. I…

---

## [Collecting up Validator Security Resources](https://forum.cosmos.network/t/collecting-up-validator-security-resources/2884)

<div class="topic-metadata">

**Author:** [@maurelian](https://forum.cosmos.network/u/maurelian)\
**Replies:** 1\
**Last updated:** [November 15, 2019, 7:55am UTC](https://forum.cosmos.network/t/collecting-up-validator-security-resources/2884 "2019-11-15T07:55:06Z")

</div>

I’m interested in learning more about best practices in validator security, and would like to use this thread to source existing content on the topic. Here are a few relevant conversations from the forum: This looks li…

---

## [Cosmos Mainnet Security Advisory Periwinkle](https://forum.cosmos.network/t/cosmos-mainnet-security-advisory-periwinkle/2911)

<div class="topic-metadata">

**Author:** [@Jessysaurusrex](https://forum.cosmos.network/u/Jessysaurusrex)\
**Replies:** 2\
**Last updated:** [October 29, 2019, 6:09pm UTC](https://forum.cosmos.network/t/cosmos-mainnet-security-advisory-periwinkle/2911 "2019-10-29T18:09:34Z")

</div>

Recently, a high severity issue impacting all versions of Tendermint and version 0.34.9 of the CosmosSDK was reported through the Tendermint HackerOne bug bounty program. A patch for this issue that also includes a fix f…

---

## [Vulnerability Coordination Retrospective: Cosmos Mainnet Security Advisory Magenta, 09-30-2019](https://forum.cosmos.network/t/vulnerability-coordination-retrospective-cosmos-mainnet-security-advisory-magenta-09-30-2019/2850)

<div class="topic-metadata">

**Author:** [@Jessysaurusrex](https://forum.cosmos.network/u/Jessysaurusrex)\
**Replies:** 1\
**Last updated:** [October 11, 2019, 2:33am UTC](https://forum.cosmos.network/t/vulnerability-coordination-retrospective-cosmos-mainnet-security-advisory-magenta-09-30-2019/2850 "2019-10-11T02:33:20Z")

</div>

On Friday, September 20th a high-severity security vulnerability in Tendermint that impacted all versions of Tendermint was reported through the Tendermint Bug Bounty program. The issue was reported at 7:27 UTC, with tri…

---

## [Cosmos Mainnet Security Advisory Magenta](https://forum.cosmos.network/t/cosmos-mainnet-security-advisory-magenta/2815)

<div class="topic-metadata">

**Author:** [@Jessysaurusrex](https://forum.cosmos.network/u/Jessysaurusrex)\
**Replies:** 2\
**Last updated:** [October 2, 2019, 7:40pm UTC](https://forum.cosmos.network/t/cosmos-mainnet-security-advisory-magenta/2815 "2019-10-02T19:40:25Z")

</div>

Recently, a high-severity security vulnerability that impacts all versions of Tendermint was reported to the Tendermint bug bounty program. A patch for the issue, which requires no breaking changes, will be released in …

---

## [SDK security considerations](https://forum.cosmos.network/t/sdk-security-considerations/2747)

<div class="topic-metadata">

**Author:** [@maurelian](https://forum.cosmos.network/u/maurelian)\
**Replies:** 1\
**Last updated:** [October 1, 2019, 5:21am UTC](https://forum.cosmos.network/t/sdk-security-considerations/2747 "2019-10-01T05:21:13Z")

</div>

Great call today! I didn’t ask this because it felt less relevant to the participants (mostly Cosmos validators) but I’m particularly interested in the security considerations for implementing a sidechain (appchain?) usi…

---

## [Will Blockchain change the way we do Banking?](https://forum.cosmos.network/t/will-blockchain-change-the-way-we-do-banking/2719)

<div class="topic-metadata">

**Author:** [@cyrilmorris](https://forum.cosmos.network/u/cyrilmorris)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 1:03pm UTC](https://forum.cosmos.network/t/will-blockchain-change-the-way-we-do-banking/2719 "2019-09-18T13:03:36Z")

</div>

Currency Has Three Eras: Commodity based, politically based, and now, math-based. The physical appearance of money in any form is a satisfactory sight, holy contentment. But the changing technology demands this satisfact…

---

## [Cosmos Community Security Office Hours](https://forum.cosmos.network/t/cosmos-community-security-office-hours/2615)

<div class="topic-metadata">

**Author:** [@Jessysaurusrex](https://forum.cosmos.network/u/Jessysaurusrex)\
**Replies:** 0\
**Last updated:** [August 16, 2019, 7:21pm UTC](https://forum.cosmos.network/t/cosmos-community-security-office-hours/2615 "2019-08-16T19:21:48Z")

</div>

This past Wednesday, (August 14th), the first-ever Security Office Hour took place with core Cosmos contributors and network operators in attendance. Here are some notes recapping the call from @ztake\_org: https://twitt…

[Previous page](https://forum.cosmos.network/c/conversation/security/19.md)
