ShippethEthereum releases, writing, news and network upgrades
Everything74Releases16Articles4Advisories54

Security advisories of the clients, exploited vulnerabilities in the software and hardware node operators run, and incidents at certificate authorities.

Network upgradeNothing scheduled. Glamsterdam is on devnet 11

Security advisories and exploited vulnerabilities

Showing only Vyper. Show everything
Pythonic Smart Contract Language for the EVMvyperlang/vyper on GitHub

54 items match, 45 of them low signal.

The stream

Newest first
Wed, 31 January 2024
Bounds check on built-in `slice()` function can be overflowed (opens in a new tab) · Vyper Security High CVE-2024-24561
Thu, 18 January 2024
concat built-in can corrupt memory (opens in a new tab) · Vyper Security High CVE-2024-22419
Tue, 12 December 2023
incorrect storage layout for contracts containing large arrays (opens in a new tab) · Vyper Security High CVE-2023-46247
Sat, 5 August 2023
Incorrectly allocated named re-entrancy locks (opens in a new tab) · Vyper Security Critical CVE-2023-39363
Thu, 11 May 2023
incorrect ordering of default arguments passed to internal calls (opens in a new tab) · Vyper Security High CVE-2023-32059
Thu, 11 May 2023
OOB DynArray access when array is on both LHS and RHS of an assignment (opens in a new tab) · Vyper Security High CVE-2023-31146
Wed, 13 April 2022
external calls are not clamped in certain complex expressions (opens in a new tab) · Vyper Security High CVE-2022-24845
Wed, 6 October 2021
Memory corruption when returning a literal struct with a private call inside of it (opens in a new tab) · Vyper Security High CVE-2021-41121
Tue, 27 July 2021
VVE-2021-0003: Storage variables overwritten by re-entrancy locks (opens in a new tab) · Vyper Security High

Also collected

Per-package monorepo tags, releases that carry little weight, and publications that post several times a day
Function variables can replace imported constant values and default arguments (opens in a new tab) · Vyper Security Medium
Multi-byte identifier characters can silently change literal values (opens in a new tab) · Vyper Security Low
Line-separator characters can silently change literal values and types (opens in a new tab) · Vyper Security Low CVE-2026-114116