https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-35936.htmlhttps://patchthecve.com/cve/CVE-2022-35936.htmlWed, 17 Jun 2026 04:52:33 +0000HIGH 8.2: Ethermint is an Ethereum library. In Ethermint running versions before `v0.17.2`, the contract `selfdestruct` invocation permanently removes the corresponding bytecode from the internal database storage. However, due to a bug in the `DeleteAccount`function, all contracts that used the identical bytehttps://patchthecve.com/cve/CVE-2021-43839.htmlhttps://patchthecve.com/cve/CVE-2021-43839.htmlWed, 17 Jun 2026 04:11:32 +0000HIGH 7.5: Cronos is a commercial implementation of a blockchain. In Cronos nodes running versions before v0.6.5, it is possible to take transaction fees from Cosmos SDK's FeeCollector for the current block by sending a custom crafted MsgEthereumTx. This problem has been patched in Cronos v0.6.5. There are no https://patchthecve.com/cve/CVE-2021-25837.htmlhttps://patchthecve.com/cve/CVE-2021-25837.htmlWed, 17 Jun 2026 03:42:30 +0000HIGH 7.5: Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. Due to the inconsistency between the Storage caching cycle and the Tx processing cycle, Storage changes caused by a failed transaction are improperly reserved in memory. Although the bad storage cache https://patchthecve.com/cve/CVE-2021-25836.htmlhttps://patchthecve.com/cve/CVE-2021-25836.htmlWed, 17 Jun 2026 03:42:30 +0000HIGH 7.5: Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memory(stateObject.code) and is further written to persistent store at the Endblock stage, which may be utilized to build honeypot contrachttps://patchthecve.com/cve/CVE-2021-25835.htmlhttps://patchthecve.com/cve/CVE-2021-25835.htmlWed, 17 Jun 2026 03:42:29 +0000HIGH 7.5: Cosmos Network Ethermint <= v0.4.0 is affected by a cross-chain transaction replay vulnerability in the EVM module. Since ethermint uses the same chainIDEpoch and signature schemes with ethereum for compatibility, a verified signature in ethereum is still valid in ethermint with the same msg contenthttps://patchthecve.com/cve/CVE-2021-25834.htmlhttps://patchthecve.com/cve/CVE-2021-25834.htmlWed, 17 Jun 2026 03:42:29 +0000HIGH 7.5: Cosmos Network Ethermint <= v0.4.0 is affected by a transaction replay vulnerability in the EVM module. If the victim sends a very large nonce transaction, the attacker can replay the transaction through the application.