Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Question about bug disclosure #72

Open
flackoon opened this issue Feb 3, 2025 · 0 comments
Open

Question about bug disclosure #72

flackoon opened this issue Feb 3, 2025 · 0 comments

Comments

@flackoon
Copy link

flackoon commented Feb 3, 2025

Summary

Hey team,

I'm a security researcher and I recently audited a codebase which is a fork of ethermint, ~2 months ago to be precise and I found a bug that turns out to be part of the forked code from ethermint. I checked and the evmos codebase (and the os one, respectively) have the same bug as well. I've reported it back then to [email protected] which appears to be the correct place to report such things according to the official docs https://docs.evmos.org/protocol/bugs. I've not received any response yet, so I'm trying to find the right place where I can discuss the vulnerability and this seems to be the last resort. I'd rather not discuss it in public, but this seemed like the only place where I can raise some sort of awareness and actually get in contact with someone from the dev/sec team.

You can find me in your mail inbox on [email protected] or on twitter https://x.com/flack00n, whatever is convenient for you.
I'll be expecting your response!

Best

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant