What is CVE-2025-24800?

CVE-2025-24800 is a vulnerability in Polytope-Labs Hyperbridge, classified under Improper Verification of Cryptographic Signature. Published 2025-01-28.

Is CVE-2025-24800 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Polytope-Labs Hyperbridge

CVE-2025-24800

Hyperbridge is a hyper-scalable coprocessor for verifiable, cross-chain interoperability. A critical vulnerability was discovered in the ismp-grandpa crate, that allowed a malicious prover easily convince the verifier of the finality of arbitrary headers. This could be used to steal funds or compromise other kinds of cross-chain applications. This vulnerability is fixed in 15.0.1.

EPSS: 0.003 (22.7th percentile) — read the EPSS interpretation.

Affected products

Polytope-labs Hyperbridge — versions < 15.0.1

Weakness classification (CWE)

Public proof-of-concept exploits

DependencyTrack/vuln-db

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-24800?: CVE-2025-24800 is a vulnerability in Polytope-Labs Hyperbridge, classified under Improper Verification of Cryptographic Signature. Published 2025-01-28.
Is CVE-2025-24800 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.