A high-severity integer overflow vulnerability in Klever-Go allows unauthorized manipulation of token circulation, posing a significant risk to blockchain integrity.

This is an integer overflow (CWE-190) vulnerability occurring within the system account and minting logic. An attacker with the mint-role can trigger a signed int64 overflow by supplying a large positive amount, causing the system to bypass maximum supply checks and corrupt on-chain counters.

The ability to bypass token supply limits and corrupt on-chain financial records carries severe implications for the integrity of the blockchain protocol. With a CVSS score of 8.7, this vulnerability constitutes a high risk, as it could lead to the unauthorized creation of assets, financial loss, and long-term damage to the trust and stability of the platform.

Immediate Action: Upgrade Klever-Go to version 1.7.19 or later to implement the required overflow protections and the FixMarketBuyOverflow consensus activation flag.

Proactive Monitoring: Monitor blockchain transactions for anomalous token minting events or unexpected fluctuations in circulation metrics that deviate from established supply models.

Compensating Controls: While standard network-level WAFs may not intercept blockchain-specific logic flaws, restricting the number of entities with minting privileges can limit the attack surface until the patch is deployed.

Public Exploit Available: No

Given the potential for significant financial impact and the corruption of core blockchain data, this vulnerability must be treated with high priority. Organizations utilizing the Klever-Go protocol should verify their current version and apply the update to version 1.7.19 immediately to remediate the integer overflow risk and prevent potential exploitation.