CVE Intelligence

Ultradag vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Ultradag products: 1 record(s), with severity, exploitation and fixes.

Ultradag 1

Exploited only (KEV) →

CVE-2026-40583 High · 8.2 CWE-460 Apr 21, 2026
UltraDAG: SmartOp Vote Path Triggers Fatal Supply Invariant Halt
UltraDAG is a minimal DAG-BFT blockchain in Rust. In version 0.1, a non-council attacker can submit a signed SmartOp::Vote transaction that passes signature, nonce, and balance prechecks, but fails authorization only after state mutation has already occurred.