MANTRA Layer 1 Blockchain Gas Limit Enforcement Vulnerability in Send Hooks

Vulnerability

A vulnerability exists in MANTRA Layer 1 Blockchain versions through 4.0.1, where the transaction gas limit is not properly enforced in send hooks. This flaw allows send hooks to consume more gas than what is available in the transaction. When combined with recursive calls in WebAssembly contracts, this could lead to a dramatic increase in gas consumption. The issue has been addressed in version 4.0.2.

Impact

The vulnerability can cause exponential increases in gas consumption, potentially leading to transaction failures or increased costs.

Remediation

Users can upgrade to MANTRA Blockchain version 4.0.2 or 5.0.0 to address this vulnerability.

Added: Oct 2, 2025, 8:18 PM
Updated: Oct 2, 2025, 8:18 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
2.5
exploitability
8.1
remediation
7.7
relevance
0.7
threat
3.2
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.