search

OmniFlix / omniflixhub

OmniFlix Hub is the root chain of the OmniFlix Network. Sovereign chains and DAOs build on top of or connect to the OmniFlix Hub to manage their web2 & web3 media operations to mint, manage, distribute & monetize NFTs enabled with community interactions.
https://OmniFlix.network
MIT License
60 stars 28 forks source link

Reporting a security issue #110

Closed jessysaurusrex closed 5 months ago

jessysaurusrex commented 1 year ago

I'm working with the development teams who are building the Interchain Stack, and I am aware of a security vulnerability in your code. I would like to report it so that we can coordinate patching to protect your chain.

Please reach out to me at security@amulet.dev so that we can coordinate privately. Thanks!

Kwaskoff commented 7 months ago

is this your patch?

verifying github.com/bianjieai/nft-transfer@v1.1.3-ibc-v7.3.0: checksum mismatch
    downloaded: h1:ItdjA6AUyt3SjiN1HxD0DH3OkyMZBqKSKSQYFDF3Ue8=
    go.sum:     h1:399lErsTpI+faTerw5Q4OuVlXAmAQSuibVvxHR3C6OY=

SECURITY ERROR
This download does NOT match an earlier download recorded in go.sum.
The bits may have been replaced on the origin server, or an attacker may
have intercepted the download attempt.
jessysaurusrex commented 7 months ago

Not me! I am trying to get an email security contact for your team for future security coordination efforts.

harish551 commented 5 months ago

Hi @jessysaurusrex here is our security contact: security@omniflix.network