Graph Protocol Contracts

1 CVEs product

Monthly

CVE-2026-28410 HIGH PATCH This Week

Premature token unlock in Graph Protocol Contracts versions before 3.0.0 allows authenticated users to bypass vesting restrictions and access locked tokens before their scheduled release date. An attacker with valid credentials can manipulate the vesting contract logic to drain funds that should remain locked, resulting in unauthorized token theft. A patch is available in version 3.0.0.

Authentication Bypass Graph Protocol Contracts
NVD GitHub
CVSS 3.1
8.1
EPSS
0.0%
CVE-2026-28410
EPSS 0% CVSS 8.1
HIGH PATCH This Week

Premature token unlock in Graph Protocol Contracts versions before 3.0.0 allows authenticated users to bypass vesting restrictions and access locked tokens before their scheduled release date. An attacker with valid credentials can manipulate the vesting contract logic to drain funds that should remain locked, resulting in unauthorized token theft. A patch is available in version 3.0.0.

Authentication Bypass Graph Protocol Contracts
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy