CVE-2025-61595 | Vulnetix

CVE-2025-61595 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from NVD · Published September 30, 2025

MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract, potentially amplifying the gas consumption exponentially. This is fixed in version 4.0.2.

EPSS 0.33% · 26.8th percentile

Risk scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

EPSS Score

0.33%

26.8th percentile

Timeline

Sep 30, 2025 CVE Published
Oct 3, 2025 EPSS Score (30 in total, the first dated here)
Dec 7, 2025 Security Advisory
Mar 26, 2026 Coalition ESS Score (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2025-61595
vulnetix vdb fixes CVE-2025-61595

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-61595/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →