---
id: CVE-2025-61595
title: >-
  MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real
  world regulatory requirements
summary: >-
  MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real
  world regulatory requirements. Versions 4.0.1 and below do not enforce the tx
  gas limit in its send hooks. Send hooks can spend more gas than what remains
  in …
severity: none
cwe:
  - CWE-400
  - CWE-770
published: '2025-10-02'
updated: '2026-10-08'
sourceUpdated: '2026-10-08T23:10:00.213'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-61595'
references:
  - url: >-
      https://github.com/MANTRA-Chain/mantrachain/commit/30d36c46e9823b56b8f0dcbb66e980ca5df284e4
    label: security-advisories@github.com
  - url: >-
      https://github.com/MANTRA-Chain/mantrachain/security/advisories/GHSA-qwvm-wqq8-8j69
    label: security-advisories@github.com
tags:
  - nvd
epss: 0.00334
epssPercentile: 0.24777
ingestedAt: '2026-10-08T23:16:47.359Z'
---

## Overview

MANTRA is a purpose-built RWA Layer 1 Blockchain, capable of adherence to real world regulatory requirements. Versions 4.0.1 and below do not enforce the tx gas limit in its send hooks. Send hooks can spend more gas than what remains in tx, combined with recursive calls in the wasm contract, potentially amplifying the gas consumption exponentially. This is fixed in version 4.0.2.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.