CVE-2026-62162 - Hydra: Deposit Claim omits Head state-token spending requirement
CVE ID :CVE-2026-62162 Published : Oct. 30, 2026, 7:18 p.m. | 42 minutes ago Description :Hydra is a layer-two scalability solution for Cardano. Prior to 2.1.0, the `Claim` branch in `hydra-plutus/validators/deposit.ak` checks only that `datum.head_id` matches the attacker-controlled...