# Security Notifications

**URL:** https://forum.flow.com/c/security-notifications/10.md

[Latest](https://forum.flow.com/latest.md) · [Categories](https://forum.flow.com/categories.md) · [Tags](https://forum.flow.com/tags.md)

---

## [About the Security Notifications category](https://forum.flow.com/t/about-the-security-notifications-category/115)

<div class="topic-metadata">

**Author:** [@Mackenzie](https://forum.flow.com/u/Mackenzie)\
**Replies:** 0

</div>

Important security discussion and updates for the Flow network.

---

## [Fixed: Vulnerable Accounts 2024-10-01](https://forum.flow.com/t/fixed-vulnerable-accounts-2024-10-01/6604)

<div class="topic-metadata">

**Author:** [@bastian](https://forum.flow.com/u/bastian)\
**Replies:** 1\
**Last updated:** [January 4, 2025, 3:05am UTC](https://forum.flow.com/t/fixed-vulnerable-accounts-2024-10-01/6604 "2025-01-04T03:05:20Z")

</div>

Summary of Impact After the Crescendo upgrade it was reported that some contracts were updated to Cadence 1.0 in a manner that was not preserving functionality, which resulted in some public links getting migrated to cap…

---

## [Fixed: Cadence Vulnerability 2024-08-30 (default functions)](https://forum.flow.com/t/fixed-cadence-vulnerability-2024-08-30-default-functions/6603)

<div class="topic-metadata">

**Author:** [@bastian](https://forum.flow.com/u/bastian)\
**Replies:** 0\
**Last updated:** [October 1, 2024, 10:23pm UTC](https://forum.flow.com/t/fixed-cadence-vulnerability-2024-08-30-default-functions/6603 "2024-10-01T22:23:22Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact A low-impact vulnerability that could have lead to resources being lost, by the non-execution of interface default functio…

---

## [Fixed: Cadence Vulnerability 2024-06-14](https://forum.flow.com/t/fixed-cadence-vulnerability-2024-06-14/6158)

<div class="topic-metadata">

**Author:** [@supun](https://forum.flow.com/u/supun)\
**Replies:** 0\
**Last updated:** [June 14, 2024, 4:51pm UTC](https://forum.flow.com/t/fixed-cadence-vulnerability-2024-06-14/6158 "2024-06-14T16:51:51Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact A critical-impact vulnerability that would have allowed someone to duplicate resources. Technical Summary of Issue In gen…

---

## [Fixed: Cadence Vulnerabilities 2023-09-16](https://forum.flow.com/t/fixed-cadence-vulnerabilities-2023-09-16/5237)

<div class="topic-metadata">

**Author:** [@Jan](https://forum.flow.com/u/Jan)\
**Replies:** 5\
**Last updated:** [October 3, 2023, 12:04am UTC](https://forum.flow.com/t/fixed-cadence-vulnerabilities-2023-09-16/5237 "2023-10-03T00:04:03Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact An attacker may gain unauthorized access to more functionality than granted: An attacker can borrow a private capability,…

---

## [Fixed: Cadence Vulnerabilities 2023-07-10](https://forum.flow.com/t/fixed-cadence-vulnerabilities-2023-07-10/5001)

<div class="topic-metadata">

**Author:** [@Jan](https://forum.flow.com/u/Jan)\
**Replies:** 1\
**Last updated:** [July 18, 2023, 2:11pm UTC](https://forum.flow.com/t/fixed-cadence-vulnerabilities-2023-07-10/5001 "2023-07-18T14:11:35Z")

</div>

Cadence Security Report 2023-07-06 Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact Four issues were found with different impact levels: A critical-impact vulnerability …

---

## [Fixed: Cadence Vulnerabilities 2023-06](https://forum.flow.com/t/fixed-cadence-vulnerabilities-2023-06/4857)

<div class="topic-metadata">

**Author:** [@sainati](https://forum.flow.com/u/sainati)\
**Replies:** 0\
**Last updated:** [June 7, 2023, 9:07pm UTC](https://forum.flow.com/t/fixed-cadence-vulnerabilities-2023-06/4857 "2023-06-07T21:07:04Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact Four critical-impact vulnerabilities would have allowed someone to duplicate resources. Technical Summary of Issues When…

---

## [Fixed: Cadence Vulnerability 2023-03-30](https://forum.flow.com/t/fixed-cadence-vulnerability-2023-03-30/4532)

<div class="topic-metadata">

**Author:** [@Jan](https://forum.flow.com/u/Jan)\
**Replies:** 0\
**Last updated:** [March 30, 2023, 8:57pm UTC](https://forum.flow.com/t/fixed-cadence-vulnerability-2023-03-30/4532 "2023-03-30T20:57:02Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact A high-impact vulnerability that could crash an execution node when trying to return a cyclic storage reference from a scr…

---

## [Fixed: Cadence Vulnerability 2023-02-22](https://forum.flow.com/t/fixed-cadence-vulnerability-2023-02-22/4371)

<div class="topic-metadata">

**Author:** [@Jan](https://forum.flow.com/u/Jan)\
**Replies:** 0\
**Last updated:** [February 23, 2023, 12:34am UTC](https://forum.flow.com/t/fixed-cadence-vulnerability-2023-02-22/4371 "2023-02-23T00:34:37Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact A critical-impact vulnerability allowed circumventing reference semantics. This could have allowed someone to gain unautho…

---

## [Fixed: Cadence Vulnerabilities 2022-06](https://forum.flow.com/t/fixed-cadence-vulnerabilities-2022-06/3279)

<div class="topic-metadata">

**Author:** [@bastian](https://forum.flow.com/u/bastian)\
**Replies:** 0\
**Last updated:** [June 22, 2022, 8:38pm UTC](https://forum.flow.com/t/fixed-cadence-vulnerabilities-2022-06/3279 "2022-06-22T20:38:48Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact A critical-impact vulnerability allowed circumventing resource semantics. This could have allowed someone to send a malic…

---

## [Fixed: Cadence Vulnerability 2021-07-14](https://forum.flow.com/t/fixed-cadence-vulnerability-2021-07-14/2225)

<div class="topic-metadata">

**Author:** [@DrewGarrison](https://forum.flow.com/u/DrewGarrison)\
**Replies:** 0\
**Last updated:** [July 22, 2021, 10:35pm UTC](https://forum.flow.com/t/fixed-cadence-vulnerability-2021-07-14/2225 "2021-07-22T22:35:02Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact Three critical vulnerabilities allowed circumventing resource semantics. This could have allowed someone to send a malic…

---

## [Fixed: Cadence Vulnerability 2021-04-20](https://forum.flow.com/t/fixed-cadence-vulnerability-2021-04-20/1937)

<div class="topic-metadata">

**Author:** [@DrewGarrison](https://forum.flow.com/u/DrewGarrison)\
**Replies:** 0\
**Last updated:** [May 17, 2021, 5:06pm UTC](https://forum.flow.com/t/fixed-cadence-vulnerability-2021-04-20/1937 "2021-05-17T17:06:36Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact A user who is able to send transactions is able to crash the execution node and thus halt the network by attempting to s…

---

## [Fixed: Cadence Vulnerability 2021-04-13](https://forum.flow.com/t/fixed-cadence-vulnerability-2021-04-13/1926)

<div class="topic-metadata">

**Author:** [@DrewGarrison](https://forum.flow.com/u/DrewGarrison)\
**Replies:** 0\
**Last updated:** [May 14, 2021, 8:56pm UTC](https://forum.flow.com/t/fixed-cadence-vulnerability-2021-04-13/1926 "2021-05-14T20:56:28Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet Summary of Impact The vulnerability could have allowed someone to send a malicious transaction that would have allowed them to duplicate res…

---

## [Fixed: Cadence Vulnerability 2021-03-24](https://forum.flow.com/t/fixed-cadence-vulnerability-2021-03-24/1673)

<div class="topic-metadata">

**Author:** [@unlocked](https://forum.flow.com/u/unlocked)\
**Replies:** 0\
**Last updated:** [April 7, 2021, 9:37pm UTC](https://forum.flow.com/t/fixed-cadence-vulnerability-2021-03-24/1673 "2021-04-07T21:37:59Z")

</div>

Issue Overview Current Status: Issue Fixed Affected Network: Testnet, Mainnet The vulnerability outlined could have allowed someone to send a malicious transaction that abused a check of Cadence types (such as a token’…
