Skip to content

Fees in different denom than ubbn can crash the chain

High
KonradStaniec published GHSA-56j4-446m-qrf6 Jun 28, 2025

Package

No package listed

Affected versions

< 2.2.0

Patched versions

2.2.0

Description

Summary

Sending transactions with fees different than native Babylon genesis denom (ubbn) leads to chain halt.

Impact

Denial of Service - Due to panic in the x/distribution module BeginBlocker triggered by a error when sending fees from feeCollector to x/distribution module - https://github.com/cosmos/cosmos-sdk/blob/main/x/distribution/keeper/allocation.go#L28 Babylon Genesis will halt

Severity

High

CVE ID

No known CVE

Weaknesses

No CWEs