Research / Public record

Evidence from systems that move value.

VulSight studies how failures cross code, consensus, contracts, and authorization boundaries. Each public item links to the record that supports it.

Inspect the public record Explore agent security

Official advisory

A public record linked to its available sources.

Geth / Peer message handlingCVE-2026-26314

High

Vendor confirmed

Geth denial-of-service vulnerability via a malicious peer message

A specially crafted message can force an affected node to shut down or crash.

Affected: Versions through 1.16.8
Fixed: 1.16.9 and 1.17.0
Credit: Waleed Ahmed, VulSight

Independent record

Independent rankings with direct sources.

Execution layer · Checked Jul 20, 2026#15

Ethereum

Public profile · Checked Jul 25, 2026#16

Cantina

Overall rank · Checked Jul 24, 2026#23

HackenProof

Overall rank · Checked Jul 24, 2026#67

Immunefi

Selected outcomes

Failures with consequences for value and availability.

Smart contracts / ImmunefiPublic acknowledgement

critical

$300K

Critical vulnerability with fund loss impact

A flaw in smart contract logic exposed more than $100M in TVL to potential fund loss. The project and exploit path remain confidential.

Value at risk: $100M+ TVL
Classification: Critical
Disclosure: Name withheld under disclosure terms

Research into product

Agent payments inherit every system beneath the transaction.

The agent can choose the wrong action. The signer, contract, or network can fail too. VulSight applies one exploit discipline from intent through execution.

Explore the authorization framework Discuss a security engagement