What’s Vulnerable › Vulnerabilities
CVE-2022-24916
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-02-10 · updated 2026-06-17
Description
Optimism before @eth-optimism/l2geth@0.5.11 allows economic griefing because a balance is duplicated upon contract self-destruction.
Affected products
- Optimism Eth-Optimism/L2Geth: before 0.5.11 — fixed in 0.5.11
How to fix
Upgrade to a fixed version: Optimism Eth-Optimism/L2Geth 0.5.11. Check the vendor advisory for mitigations.
References
- https://github.com/ethereum-optimism/optimism/compare/%40eth-optimism%2Fl2geth%400.5.10...%40eth-optimism%2Fl2geth%400.5.11
- https://github.com/ethereum-optimism/optimism/pull/2146
- https://news.ycombinator.com/item?id=30289240
- https://optimismpbc.medium.com/disclosure-fixing-a-critical-bug-in-optimisms-geth-fork-a836ebdf7c94
- https://www.saurik.com/optimism.html
- https://github.com/ethereum-optimism/optimism/compare/%40eth-optimism%2Fl2geth%400.5.10...%40eth-optimism%2Fl2geth%400.5.11
- https://github.com/ethereum-optimism/optimism/pull/2146
- https://news.ycombinator.com/item?id=30289240
- https://optimismpbc.medium.com/disclosure-fixing-a-critical-bug-in-optimisms-geth-fork-a836ebdf7c94
- https://www.saurik.com/optimism.html
Get alerted when CVE-2022-24916 or the next vulnerability affects your stack