tendermint — Vulnerabilities & Security Advisories 3

Tendermint is a blockchain consensus engine enabling decentralized applications through its Byzantine Fault Tolerance protocol. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and insecure default configurations. While no major security incidents have been widely documented, the three recorded CVEs highlight risks in API endpoints and state synchronization. The platform's security relies on deterministic consensus but requires careful implementation to prevent common web vulnerabilities. Regular audits and secure coding practices remain essential given its use in critical infrastructure handling sensitive transactions.