Skip to content
Zenhive Machine Payments Protocol vulnerabilities
-
zenhive mpp, machine payments protocol +1 more
On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay
CVE-2026-67581
Fix available
8.7 High
-
zenhive mpp, machine payments protocol +1 more
Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain
CVE-2026-73541
Fix available
8.3 High
-
zenhive mpp, machine payments protocol +1 more
Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay
CVE-2026-73136
Fix available
8.2 High
-
zenhive mpp, machine payments protocol +1 more
Non-atomic hash-credential dedup in mpp Tempo allows replay of a confirmed payment under a concurrent race
CVE-2026-73829
Fix available
6.3 Medium