diff --git a/go/go.mod b/go/go.mod
index 6e1fb305..a6a533a7 100644
--- a/go/go.mod
+++ b/go/go.mod
@@ -6,3 +6,6 @@ require (
 	github.com/cosmos/gogoproto v1.4.3
 	golang.org/x/crypto v0.2.0
 )
+
+// subject to the dragonberry vulnerability
+retract [v0.0.0, v0.7.0]