CVE-2025-24800: Polytope-Labs Hyperbridge

Critical severity, CVSS 9.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical vulnerability was discovered in the ismp-grandpa crate, that allowed a malicious prover easily convince the verifier of the finality of arbitrary headers. This could be used to steal funds or compromise other kinds of cross-chain applications. This vulnerability is fixed in 15.0.1.

Affected products

• Polytope-Labs Hyperbridge: before 15.0.1 (fixed in 15.0.1)

Published 2025-01-28. Last modified 2026-06-17.