THREAT OPS › Threat News › [GHSA] GHSA-mrpp-v6pg-p54x (high) — klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply
[GHSA] GHSA-mrpp-v6pg-p54x (high) — klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply
GHSA-mrpp-v6pg-p54x Severity: high CVE: CVE-2026-55764
klever-go: SFT add-quantity `int64` overflow bypasses a finite per-nonce MaxSupply
## Summary On the SFT add-quantity path the only supply bound is `SFTAddCirculation`, which does `meta.Circulation += amount` with **no overflow guard**, then checks `if meta.Circulation > meta.MaxSupply && meta.MaxSupply != 0`. If `amount` overflows `int64` a
Indicators of compromise
- 21e8059e50ffb5534a02f0f78e12db4632740d8d82da144d1f3732b4b55aad1asha256
- 8aff40fa270905516cad82083e7eae6264e63a6874f8c13d8348c3632e1c981esha256
- CVE-2026-55764cve
Original source: https://github.com/advisories/GHSA-mrpp-v6pg-p54x