CVE-2020-5232 — Ethereum Name Service - Malicious takeover of previously owned ENS names
A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A …
Published: 2020-01-30 · CVSS: 8.7 · CVSS 3.1
A user who owns an ENS domain can set a trapdoor, allowing them to transfer ownership to another user, and later regain ownership without the new owners consent or awareness. A new ENS deployment is being rolled out that fixes this vulnerability in the ENS registry.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7