CVE-2021-25836: Chainsafe Ethermint

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Cosmos Network Ethermint <= v0.4.0 is affected by cache lifecycle inconsistency in the EVM module. The bytecode set in a FAILED transaction wrongfully remains in memory(stateObject.code) and is further written to persistent store at the Endblock stage, which may be utilized to build honeypot contracts.

Affected products

• Chainsafe Ethermint: up to and including 0.4.0

Published 2021-02-08. Last modified 2026-06-17.