CVE-2020-5232: Ens.domains Ethereum Name Service

High severity, CVSS 8.7. EPSS: 1.2% chance of exploitation in the next 30 days.

A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry.

Affected products

• Ens.domains Ethereum Name Service: up to and including 0.1.0

Published 2020-01-31. Last modified 2026-06-17.