CVE-2026-57445: CWE-703: Improper Check or Handling of Exceptional Conditions in 1Hive gardens-v2
Description
Gardens v2 is a modular governance framework that enables communities to create and manage multiple governance pools with customizable parameters and voting mechanisms. In dfba919e218e20d52db9f7b2e8d292d45a46c91b and prior, normal beneficiary payout paths in StreamingEscrow preserve depositAmount() while an active stream needs an escrow reserve. However, the approve-side dispute resolution path drains the whole available escrow balance to the proposal beneficiary. At time of publication, there are no publicly known patches.
CVSS v4.0
Score 8.7high
Affected software
1Hive
gardens-v2
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
Gardens v2 is a modular governance framework for managing governance pools with customizable voting. In versions up to and including commit dfba919e218e20d52db9f7b2e8d292d45a46c91b, the normal payout mechanism in StreamingEscrow preserves the depositAmount while an active stream requires an escrow reserve. However, the approve-side dispute resolution path improperly drains the entire available escrow balance to the proposal beneficiary, representing an improper check or handling of exceptional conditions (CWE-703). No remediation or patch is currently available.
Potential Impact
The vulnerability allows the dispute resolution process to drain the entire escrow balance to a proposal beneficiary, potentially causing loss of funds held in escrow beyond the intended deposit amount. This can disrupt governance pool operations and lead to financial loss for other participants relying on the escrow mechanism.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when using the affected dispute resolution path in StreamingEscrow and consider limiting exposure or usage of this functionality.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-06-24T13:21:20.729Z
- Cvss Version
- 4.0
- State
- PUBLISHED
Threat ID: 6a9990d2acd9273b491c1d5f
Added to database: 09/03/2026, 15:22:58 UTC
Last enriched: 09/07/2026, 12:58:42 UTC
Last updated: 10/17/2026, 06:48:18 UTC
Views: 56
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.