Ultradag Ultradag vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Ultradag Ultradag: 1 record(s), with affected versions and fixes.
cpe:2.3:a:ultradag:ultradag

CVE-2026-40583 High · 8.2 CWE-460 Apr 21, 2026

UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt

UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred.