THREATOPS
THREAT OPSThreat News › State divergence enables unauthorized access

State divergence enables unauthorized access

medtrailofbitsPublished 2026-08-25

<p>We found and reported a bug in Provenance Blockchain, a public proof-of-stake chain built on <a href="https://docs.cosmos.network/">Cosmos SDK</a>, that lets any user grant themselves admin control over marker accounts without holding a single token. Provenance covers a range of financial services, including on-chain tokenized loans, private equity tokens, bridged assets, and asset registries.

Indicators of compromise

Original source: https://blog.trailofbits.com/2026/08/25/state-divergence-enables-unauthorized-access/