RUG.TOOLSTrail of Bits reports Provenance marker authorization flaw
What was reported
Trail of Bits reported a bug in Provenance Blockchain versions before 1.28.0 that could let any user grant themselves administrative control over marker accounts without owning tokens. The source says 82 mainnet markers tied to live financial assets were affected; mitigation shipped in v1.28.0, with a fix in v1.29.0.
Why it matters
Unauthorized marker administration could affect access controls for tokenized assets and related account operations on the chain.
Evidence and limitations
- The source identifies Provenance as a public proof-of-stake chain built on Cosmos SDK.
- The supplied supported-chain list does not include Provenance, so the chain field cannot be represented accurately.
Rug.Tools has not independently verified the publisher's incident claims. Reported allegations remain attributed to Trail of Bits; they are not presented as deterministic Rug.Tools findings.
Original source
Source publication time:
Read Trail of BitsThis report summarizes attributed source material and automated editorial checks. It is not a legal finding or investment advice. Rug.Tools does not identify a person or organization as responsible without independently verified evidence, and a token is never labeled safe merely because no incident appears in this feed. Reports may be corrected or unpublished when source information changes.