← All advisories

High severity8.6NVD Advisory· Published Apr 7, 2026· Updated May 22, 2026

CVE-2026-4931

CVE-2026-4931

Description

Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

GitHub/Marginalprotocolinferred
Range: = v1
Marginal/V1 Core
cpe:2.3:a:marginal:v1-core:*:*:*:*:*:*:*:*
Range: <=1.0.2

Patches

Vulnerability mechanics

References

4

medium.com/@clarkcorrin/cve-2026-4931-how-spearbits-cantina-denied-a-critical-vulnerability-using-verifiably-false-0a27b92ac2dbnvdMitigationPress/Media CoverageThird Party Advisory
cvefeed.io/cwe/detail/cwe-681-incorrect-conversion-between-numeric-typesnvdNot Applicable
marginal.gitbook.io/docsnvdProduct
scs.owasp.org/SCWE/SCSVS-CODE/SCWE-041/nvdNot Applicable

News mentions

0

No linked articles in our index yet.