---
title: "GHSA-j496-crgh-34mx: ibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks"
url: https://erroneo.us/security/ghsa/GHSA-j496-crgh-34mx/
description: "GHSA-j496-crgh-34mx (critical, Go): ibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks. Name: ASA-2024-007: Potential Reentrancy using…"
type: advisory
section: "Security Digest"
date_published: 2024-04-05
date_modified: 2024-04-05
publisher: erroneo.us
author: erroneo.us Security Desk
ghsa: "GHSA-j496-crgh-34mx"
license: All rights reserved. Quote with attribution and a link.
---

# GHSA-j496-crgh-34mx: ibc-go: Potential Reentrancy using Timeout Callbacks in ibc-hooks

## Affected packages

- Go `github.com/cosmos/ibc-go/v4` < 4.6.0 → fixed: 4.6.0
- Go `github.com/cosmos/ibc-go/v5` < 5.4.0 → fixed: 5.4.0
- Go `github.com/cosmos/ibc-go/v6` < 6.3.0 → fixed: 6.3.0
- Go `github.com/cosmos/ibc-go/v7` < 7.4.0 → fixed: 7.4.0
- Go `github.com/cosmos/ibc-go/v8` < 8.2.0 → fixed: 8.2.0
- Go `github.com/cosmos/ibc-go/v3` < 4.6.0 → fixed: none listed
- Go `github.com/cosmos/ibc-go/v2` < 4.6.0 → fixed: none listed
- Go `github.com/cosmos/ibc-go` < 4.6.0 → fixed: none listed

## Details

Name: ASA-2024-007: Potential Reentrancy using Timeout Callbacks in ibc-hooks Component: ibc-go Criticality: Critical (ACMv1: I:Critical; L:AlmostCertain) Affected versions:

## Sources

- [GitHub Advisory GHSA-j496-crgh-34mx](https://github.com/advisories/GHSA-j496-crgh-34mx)
- [github.com](https://github.com/cosmos/ibc-go/security/advisories/GHSA-j496-crgh-34mx)
- [github.com](https://github.com/cosmos/ibc-go/commit/04275aa77644dec97fb91b749d963c992591b7f7)
- [github.com](https://github.com/cosmos/ibc-go/commit/278fa89f192af04af32d82fd5ef41f84f82edd97)
- [github.com](https://github.com/cosmos/ibc-go/commit/5e2e9ebc2f67df324028dd36a1837ffcc8e6b0dd)
- [github.com](https://github.com/cosmos/ibc-go/commit/a0185df3953070ba5ebcb66735925449d1dbe729)
- [github.com](https://github.com/cosmos/ibc-go/commit/e78b3a2b9c9ce80a67d6b1c2b7f9abcb225cc219)

---
Source page: https://erroneo.us/security/ghsa/GHSA-j496-crgh-34mx/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt