nimiq — Vulnerabilities & Security Advisories 25

Nimiq is a blockchain platform focused on enabling peer-to-peer transactions without centralized infrastructure. Historically, it has been susceptible to multiple remote code execution vulnerabilities, cross-site scripting flaws, and privilege escalation issues, accounting for its 16 recorded CVEs. The platform's security characteristics include its lightweight JavaScript-based implementation, though this has also introduced attack surfaces. Notable incidents include multiple RCE vulnerabilities in its node software that allowed attackers to execute arbitrary code, and XSS issues in its web wallet components. These vulnerabilities have primarily stemmed from input validation failures and insecure deserialization, highlighting ongoing challenges in securing decentralized applications.