All issues

Search results

[BitVM3 Bounty] Critical: Operator can forge watchtower-inclusion bitmap to defeat disprove and claim illegitimate Take

Status: Open.

#439 In GOATNetwork/bitvm-node;

· lazyleon-hub opened on Aug 21, 2026

[Security] finishWithdrawDisproved pays fixed rewards uncapped by actual slash; empty pool reverts entire disprove flow (DoS)

Status: Open.

#438 In GOATNetwork/bitvm-node;

· cilokesteh opened on Aug 21, 2026

[Security] Committee signature replay across deployments: updateOwners digest lacks contract-address & chain-id binding

Status: Open.

#437 In GOATNetwork/bitvm-node;

· cilokesteh opened on Aug 21, 2026

[Security] bridge-out CLI submits LP claimData without binding --btc-address/--amount

Status: Open.

#436 In GOATNetwork/bitvm-node;

· asbestos22 opened on Aug 21, 2026

[Security] Swap claim watcher permanently wedges on Address::from_script of an attacker-chosen output script

Status: Open.

#435 In GOATNetwork/bitvm-node;

· asbestos22 opened on Aug 21, 2026

[Security] detect_kickoff only watches one OperatorDataPushed graph per operator (unauthorized Take1)

Status: Open.

#431 In GOATNetwork/bitvm-node;

· asbestos22 opened on Aug 19, 2026

[Security] Verifier AssertSent skip is one-shot and unbound when pubin is late (unauthorized Take2)

Status: Open.

#430 In GOATNetwork/bitvm-node;

· asbestos22 opened on Aug 19, 2026

[Security] Verifier KickoffSent challenge is one-shot and fail-open (unauthorized Take1)

Status: Open.

#429 In GOATNetwork/bitvm-node;

· asbestos22 opened on Aug 19, 2026

[Security] Unauthenticated PUTs persist and overwrite BitVM3 instance state

Status: Open.

#428 In GOATNetwork/bitvm-node;

· asbestos22 opened on Aug 19, 2026

Fix total_time_to_proof

Status: Open.

#366 In GOATNetwork/bitvm-node;

· eigmax opened on Jan 24, 2026

Internal Audit Comments

Status: Open.

#339 In GOATNetwork/bitvm-node;

· eigmax opened on Jan 12, 2026

Patch Bitcoin and crypto-bigint in circuit's guest program

Status: Open.

#287 In GOATNetwork/bitvm-node;

· eigmax opened on Dec 23, 2025