EVM Contract v1.1.1

Introduction

The latest patch release of Vaulta EVM introduces a fix to a critical security bug related to a flawed authorization check.

Read on for more details.

Bug fixes

Flawed authorization check

PRs

• (867)[1.1] fix callback

It was discovered that it was possible to circumvent authorization in certain actions due to how callbacks were structured. This issue could lead to denial of service and unauthorized arbitrary transactions to be executed.

Building, compatibility, and upgrading

Building

The README in the evm-contract repository contains instructions on how to build Vaulta EVM Contract.

Compatibility and upgrading

Vaulta EVM Contract can be upgraded from the prior 1.1.x version by simply deploying the WASM and ABI.

Further details on changes since last release

Contributors

Special thanks to the contributors that submitted patches for this release:

• @taokayan

Full list of changes since last release

PRs

• (867)[1.1] fix callback
• (872)[1.1] version bump 1.1.1

Full Changelog: v1.1.0...v1.1.1