← All reports

The Nimiq blockchain platform has vulnerabilities in its transaction handling that could allow unauthorized changes to validator keys and cause system panics.

CybersecurityBlockchainApr 23, 2026score 0.172 posts · 0 replies across 1 instances
The thread discusses two vulnerabilities in the nimiq-transaction product, highlighting security issues related to the staking contract and a panic via HistoryTreeProof length mismatch. These vulnerabilities are important as they affect the security and stability of the Nimiq blockchain platform.

Claims

The Nimiq blockchain platform has vulnerabilities in its transaction handling that could allow unauthorized changes to validator keys and cause system panics.
Parent: CybersecurityEntity: Nimiq BlockchainImpact: negativeDate: Apr 23, 2026Target: The security and stability of the Nimiq blockchain platform

Source posts

@[email protected]
🚨 EUVD-2026-25084 📊 Score: 3.1/10 (CVSS v3.1) 📦 Product: nimiq-transaction 🏢 Vendor: nimiq 📅 Updated: 2026-04-22 📝 nimiq-transaction: Panic via `HistoryTreeProof` length mismatch 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25084 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Apr 23, 2026
#cybersecurity#infosec#euvd#cve#vulnerability
@[email protected]
🚨 EUVD-2026-25086 📊 Score: 6.8/10 (CVSS v3.1) 📦 Product: nimiq-transaction 🏢 Vendor: nimiq 📅 Updated: 2026-04-22 📝 nimiq-transaction provides the transaction primitive to be used in Nimiq's Rust implementation. Prior to version 1.3.0, the staking contract accepts `UpdateValidator` transactions that set `new_voting_key=Some(...)` while omitting `new_proof_of_knowl... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-25086 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Apr 23, 2026
#cybersecurity#infosec#euvd#cve#vulnerability