Omni Identifies Critical Vulnerability in CometBFT
In October 2024, our team identified and reported a critical vulnerability in CometBFT, specifically within the implementation of ABCI 2.0's Vote Extensions. This flaw has since been patched and publicly disclosed in GitHub Security Advisory GHSA-p7mv-53f2-4cwj. Our team member, Corver, was credited with discovering and reporting this exploit.