GMS-2022-5427: Potential inter-blockchain communication (IBC) protocol compromise via "Dragonberry" vulnerability in cheqd

October 18, 2022 (updated January 7, 2023)

This vulnerability affects IBC transfers due to a security vulnerability dubbed “Dragonberry” upstream in Cosmos SDK. The vulnerability could allow malicious attackers to compromise chain-to-chain IBC transfers. There is no vulnerability in the DID/resource modules for cheqd-node.

References

forum.cosmos.network/t/ibc-security-advisory-dragonberry/7702/1
github.com/advisories/GHSA-j92c-mmf7-j5x5
github.com/cheqd/cheqd-node/security/advisories/GHSA-j92c-mmf7-j5x5
github.com/cosmos/cosmos-sdk/releases/tag/v0.45.9

Code Behaviors & Features

Detect and mitigate GMS-2022-5427 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →