CVE-2026-4931

MEDIUM 6.8

CVE-2026-4931

CVSS Score

6.8

EPSS Score

0.0%

EPSS Percentile

5th

Smart contract Marginal v1 performs unsafe downcast, allowing attackers to settle a large debt position for a negligible asset cost.

Vendor	marginal
Product	marginal smart contract
Published	Apr 7, 2026
Last Updated	Apr 8, 2026

Stay Ahead of the Next One

Get instant alerts for marginal marginal smart contract

Be the first to know when new medium vulnerabilities affecting marginal marginal smart contract are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Marginal / Marginal Smart Contract

References

NVD ↗ CVE.org ↗ EPSS Data ↗

cvefeed.io: https://cvefeed.io/cwe/detail/cwe-681-incorrect-conversion-between-numeric-types scs.owasp.org: https://scs.owasp.org/SCWE/SCSVS-CODE/SCWE-041/ marginal.gitbook.io: https://marginal.gitbook.io/docs github.com: https://github.com/MarginalProtocol medium.com: https://medium.com/@clarkcorrin/cve-2026-4931-how-spearbits-cantina-denied-a-critical-vulnerability-using-verifiably-false-0a27b92ac2db