CVE-2022-25335: Rigoblock Drago

High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days.

RigoBlock Dragos through 2022-02-17 lacks the onlyOwner modifier for setMultipleAllowances. This enables token manipulation, as exploited in the wild in February 2022. NOTE: although 2022-02-17 is the vendor's vulnerability announcement date, the vulnerability will not be remediated until a major protocol upgrade occurs.

Affected products

• Rigoblock Drago: up to and including 2022-02-17

Published 2022-02-18. Last modified 2026-06-17.