v1.7.19 Patch: 4 CVEs in KLV Market & SFT Mint (2 Critical, 2 High)

Summary of Vulnerability Key Information I. Overview of the Vulnerabilities Version v1.7.19 (Marketplace & SFT Mint Security Release) addresses 4 coordinated disclosure security advisories (2 Critical, 2 High), all located in the asset/market value layer: II. Scope of Impact Consensus Impact: All affected transactions are consensus-impacting; all nodes must be upgraded to v1.7.19. Consensus Account Freeze (fork-gated): Affected accounts are frozen; transactions from frozen accounts are rejected in . The freeze blocks only outgoing transfers, does not affect balances, and acts as a forward-looking preventive mechanism; funds do not recover automatically. Fork Gating: All consensus-impacting transactions are gated by the fork flag. The mainnet fork activates at epoch 5741 (2026-06-05 19:00 UTC). API Layer Fix: Read KApp accounts have been decoupled from API and indexer goroutines, fixing a concurrent map read/write race condition on shared cache instances. III. Remediation Plan 1. Upgrade all nodes to v1.7.19, ensuring matches the network activation epoch (mainnet 5741). 2. No data migration required. 3. Migration path: When upgrading from v1.7.19, set to the network activation epoch (mainnet 5741) and restart the nodes. 4. The fixes were developed within a private security advisory fork and merged as a single squashed commit. IV. POC / Exploit Code The page does not include POC code or exploit code blocks; it only provides textual descriptions of the triggering conditions and impacts for each vulnerability.

Goal Reached Thanks to every supporter — we hit 100%!

v1.7.19 Patch: 4 CVEs in KLV Market & SFT Mint (2 Critical, 2 High)

More from this source