Bifrost EUVD-2026-72876

Requires a signed Bifrost account able to submit mint transactions to the vtoken-minting or slpx pallet, and at least one registered channel_id to attribute volume to (attacker-controlled or otherwise). The core condition, taken directly from the description, is that the mint path accepts an 'arbitrary registered channel_id' without verifying the caller is authorized to mint on behalf of that channel - so any registered channel is a valid target. Realization of gain is gated on the protocol's commission-settlement process actually running and paying out based on recorded mint volume; the impact is limited to commission/attribution accounting (financial misdirection) and does not by itself grant confidentiality access or halt the chain. The limiting factors are the need for a funded signed account and transaction fees, and dependence on the commission mechanism being active.

The input CVSS of 9.1 (AV:N/AC:L/PR:N/UI:N/C:H/I:H/A:N) overstates the profile in two ways. First, exploitation requires a signed transaction from a funded on-chain account, which is an authenticated origin - PR:L is more honest than PR:N. Second, the impact is manipulation of commission accounting (integrity/financial misdirection), not disclosure of confidential data, so C:H is not well supported; this reads as an integrity-and-financial issue (I:H, C:N). Corroborating signals point to a real-but-not-urgent-at-scale picture: EPSS is 0.14% (3rd percentile), there is no CISA KEV listing, and no working exploit is published - only a docs link and a GitHub gist. That said, the barrier to abuse is genuinely low (a normal signed extrinsic against default runtime logic), the economic incentive is direct (siphoning protocol commission), and any operator running an affected Bifrost runtime should treat commission-misattribution as a high-priority governance/runtime-upgrade item because the loss is monetary and continuous rather than a one-off. Overall: high real-world severity for anyone running the affected pallets, tempered by the fact that it targets a single niche parachain rather than a broadly deployed product.

An attacker registers or identifies a channel it controls (or targets an existing one), then submits ordinary signed mint extrinsics through vtoken-minting or slpx while passing that channel_id as the attribution key. Over many mints the channel's recorded volume is inflated, and at the next commission settlement the protocol pays that channel a disproportionate share of commission, redirecting protocol value to the attacker. A public gist referencing the issue exists, but no confirmed weaponized exploit is identified.