What is CVE-2025-61595?

CVE-2025-61595 is a vulnerability in Mantra-Chain Mantrachain, classified under Uncontrolled Resource Consumption. Published 2025-10-02.

Is CVE-2025-61595 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Resource exhaustion in Mantra-Chain Mantrachain

CVE-2025-61595

MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract, potentially amplifying the gas consumption exponentially. This is fixed in version 4.0.2.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.003 (23.6th percentile) — read the EPSS interpretation.

Affected products

Mantra-chain Mantrachain — versions < 4.0.2

Weakness classification (CWE)

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2025-61595?: CVE-2025-61595 is a vulnerability in Mantra-Chain Mantrachain, classified under Uncontrolled Resource Consumption. Published 2025-10-02.
Is CVE-2025-61595 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.