Search results

🐛 [Bounty] - Mass Exposure of 1,733 Cardano Wallet Auth-Challenges — Credential Hashes, Nonces, and Signing Prompts Publicly Listed

🐛 BugSomething isn't workingSomething isn't working

📜 Proposal Pillar

Status: Open.

#4172 In IntersectMBO/govtool;

· Hornan7 opened on May 28, 2026

🐛 [Bounty] - Unauthenticated Arbitrary File Pinning to Intersect's Paid Pinata Account via POST /ipfs/upload

🐛 BugSomething isn't workingSomething isn't working

📜 Proposal Pillar

Status: Open.

#4171 In IntersectMBO/govtool;

· Hornan7 opened on May 28, 2026

🐛 [Bounty] - Mass PII and Voter De-Anonymisation Leak: Emails, DRep Vote Choices, and Voting Power Exposed

🐛 BugSomething isn't workingSomething isn't working

📜 Proposal Pillar

Status: Open.

#4170 In IntersectMBO/govtool;

· Hornan7 opened on May 28, 2026

🐛 [Bounty] - SQL Injection in GET /voters/:stakeKey/delegation allows any attacker to read the entire Cardano blockchain state database

🐛 BugSomething isn't workingSomething isn't working

📜 Proposal Pillar

Status: Open.

#4169 In IntersectMBO/govtool;

· Hornan7 opened on May 27, 2026

🐛 [Bounty] - Unauthenticated Open SSRF Proxy in POST /api/proxy allows any attacker to reach internal services and exfiltrate cloud credentials

🐛 BugSomething isn't workingSomething isn't working

📜 Proposal Pillar

Status: Open.

#4168 In IntersectMBO/govtool;

· Hornan7 opened on May 27, 2026

[USERSNAP] drep detail page ought to iclude voting actions

Status: Open.

#4166 In IntersectMBO/govtool;

· MSzalowski opened on May 24, 2026

[USERSNAP] I've sent an issue about not seeing IO actions to vote on about an hour before after clearing browser cache its working and infact I voted on it a month ago, sorry, it was my bad and your system is working as expected, maybe just a small issu...

usersnap-bug

Status: Open.

#4165 In IntersectMBO/govtool;

· bosko-m opened on May 22, 2026

[USERSNAP] Hello, under live voting, while connected as a drep I'm not seeing any IO governance actions, I'm seeing singapore summit but not IO, Ive voted before, I'm using lace v2 on mac OS latest version, I'm connecting the wallet fine and I can see m...

usersnap-bug

Status: Open.

#4164 In IntersectMBO/govtool;

· bosko-m opened on May 22, 2026

[USERSNAP] (same issue on preview/mainnet with eternl and lace), where my wallet is connected but trying to "Propose a new GA" results in vague "something went wrong" error loop. It directs me to ''connect a cardano wallet'' and/or "verify yourself by s...

usersnap-bug

Status: Open.

#4162 In IntersectMBO/govtool;

· bosko-m opened on May 18, 2026

[USERSNAP] i get this no matter what i try, is this a know bug? Your External Data Does Not Match the Original File. GovTool checks the URL you entered to see if the JSON file that you self-host matches the one that was generated in GovTool. To complete...

usersnap-bug

Status: Open.

#4161 In IntersectMBO/govtool;

· bosko-m opened on May 15, 2026

[USERSNAP] Voting history in drep page

Status: Open.

#4160 In IntersectMBO/govtool;

· MSzalowski opened on Apr 28, 2026

🐛 [Bounty] - Unauthenticated Mass Exposure of Cardano Treasury Budget Proposals, Financial Data, and Admin Credentials via Misconfigured Strapi Public Role

🐛 BugSomething isn't workingSomething isn't working

📜 Proposal Pillar

Status: Open.

#4159 In IntersectMBO/govtool;

· Hornan7 opened on Apr 27, 2026