GHSA-869w-47c6-fq8q Babylon Integer Overflow in Distribution Module CumulativeRewardRatio Calculation Leading to Chain Halt
An attacker can halt the Babylon blockchain by triggering an integer overflow in reward calculations via token deposits, causing a chain-wide denial of service.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is GHSA-869w-47c6-fq8q?
GHSA-869w-47c6-fq8q is a vulnerability in github.com/babylonlabs-io/babylon, published on 15 May 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Summary
Minting large amount of tokens through ibc transfer and then depositing them in validator rewards pool (via DepositValidatorRewardsPool message) can lead to integer overflow panic when calculating cumulative_reward_ratio for the validator.
This calculation happens in x/epoching module EndBlocker, thus the panic will halt the chain.
Impact
Denial of Service - Due to panic in the EndBlocker Babylon Genesis will halt
Which versions are affected by GHSA-869w-47c6-fq8q?
3 open source packages ship an affected version, including github.com/babylonlabs-io/babylon.
| Package | Affected | Fixed in |
|---|---|---|
github.com/babylonlabs-io/babylon Go | All versions | None |
github.com/babylonlabs-io/babylon Go | All versions | 1.1.0 |
github.com/babylonlabs-io/babylon Go | All versions | 1.1.0 |
How do I fix GHSA-869w-47c6-fq8q?
Upgrade github.com/babylonlabs-io/babylon to 1.1.0 or later.
Is GHSA-869w-47c6-fq8q being exploited?
There is no known exploitation of GHSA-869w-47c6-fq8q in the wild and no public exploit code.
Sources
Also known as GO-2025-3687.