CVE-2025-61595

Impact

send hooks can spend more gas than what's remained in tx, combined with recursive calls in the wasm contract, can amplify the gas consumption exponentially.

Patches

It's patched in v4.0.2 and v5.0.0

Workarounds

Is there a way for users to fix or remediate the vulnerability without upgrading?

Published: Sep 30, 2025
Updated: Oct 1, 2025
CVE: CVE-2025-61595
GHSA: GHSA-qwvm-wqq8-8j69
Severity: High
Exploit:

No technical information available.

CWEs:

CWE-400
CWE-770

Affected Software
References

Software	From	Fixed in
github.com/MANTRA-Chain/mantrachain/v4	-	4.0.2
github.com/MANTRA-Chain/mantrachain/v3	-	-
github.com/MANTRA-Chain/mantrachain/v2	-	-
github.com/MANTRA-Chain/mantrachain	-	-

https://github.com/MANTRA-Chain/mantrachain/commit/30d36c46e9823b56b8f0dcbb66e980ca5df284e4
https://github.com/MANTRA-Chain/mantrachain/issues/432
https://github.com/MANTRA-Chain/mantrachain/security/advisories/GHSA-qwvm-wqq8-8j69
https://pkg.go.dev/vuln/GO-2025-3997

Vulnerability Database

CVE-2025-61595

Impact

Patches

Workarounds

Deep Security Visibility Without the Complexity