Research / Public record

Evidence from systems that move value.

VulSight studies how failures cross code, consensus, contracts, and authorization boundaries. Each public item links to the record that supports it.

Inspect the public record Explore agent security

Official advisory

One public record. Every claim traceable.

Geth / Peer message handlingCVE-2026-26314

High

Vendor confirmed

Geth denial of service via a malicious peer message

A specially crafted message can force an affected node to shut down or crash.

Affected: Versions through 1.16.8
Fixed: 1.16.9 and 1.17.0
Credit: Waleed Ahmed, VulSight

Independent record

Public rankings. Direct sources.

Cantina

Ethereum

HackenProof

Immunefi

Selected outcomes

Failures with consequences for value and availability.

Smart contracts / ImmunefiPublic platform record

critical

$300K

Critical vulnerability with fund loss impact

A flaw in smart contract logic exposed more than $100M in TVL to potential fund loss. The project and exploit path remain confidential.

Value at risk: $100M+ TVL
Classification: Critical
Disclosure: Project withheld

Research into product

Agent payments inherit every system beneath the transaction.

The agent can choose the wrong action. The signer, contract, or network can fail too. VulSight applies one exploit discipline from intent through execution.

Explore the authorization framework Discuss a security engagement