NRDAX - decentralised infrastructure attack registry
type: Dataset
additional property: techniqueCount
  type: PropertyValue
  value: 388
additional property: familyCount
  type: PropertyValue
  value: 27
additional property: chainCount
  type: PropertyValue
  value: 66
creator: NullRabbit Labs
description: The canonical, chain-agnostic technique registry for attacks on decentralised infrastructure. Each technique is a mechanism-defined class of real primitives observed across node implementations, with evidence, instances, and a permanent citable ID.
is accessible for free: true
keywords: blockchain security
keywords: decentralised infrastructure
keywords: attack techniques
keywords: consensus
keywords: peer-to-peer
keywords: RPC
keywords: mempool
version: v0.1-import

NRDAX families
type: DefinedTermSet
description: The fixed family taxonomy techniques are classified under.
is part of: NRDAX - decentralised infrastructure attack registry

amm_value_extraction
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 0
in defined term set: NRDAX families
term code: amm_value_extraction

auth_bypass
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 1
in defined term set: NRDAX families
term code: auth_bypass

bridge
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 6
in defined term set: NRDAX families
term code: bridge

bridge_message_abuse
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 0
in defined term set: NRDAX families
term code: bridge_message_abuse

compute_amp
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 20
in defined term set: NRDAX families
term code: compute_amp

connection_exhaustion
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 16
in defined term set: NRDAX families
term code: connection_exhaustion

consensus
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 52
in defined term set: NRDAX families
term code: consensus

consensus_abuse
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 10
in defined term set: NRDAX families
term code: consensus_abuse

crypto
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 21
in defined term set: NRDAX families
term code: crypto

economic-defi
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 11
in defined term set: NRDAX families
term code: economic-defi

gossip_abuse
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 9
in defined term set: NRDAX families
term code: gossip_abuse

governance
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 1
in defined term set: NRDAX families
term code: governance

governance_capture
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 0
in defined term set: NRDAX families
term code: governance_capture

ledger-tx
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 28
in defined term set: NRDAX families
term code: ledger-tx

liquidation_abuse
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 0
in defined term set: NRDAX families
term code: liquidation_abuse

memory_amp
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 35
in defined term set: NRDAX families
term code: memory_amp

network-p2p
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 116
in defined term set: NRDAX families
term code: network-p2p

network-rpc
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 46
in defined term set: NRDAX families
term code: network-rpc

oracle_manipulation
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 0
in defined term set: NRDAX families
term code: oracle_manipulation

protocol_logic_exploit
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 0
in defined term set: NRDAX families
term code: protocol_logic_exploit

rate_limiter_bypass
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 0
in defined term set: NRDAX families
term code: rate_limiter_bypass

reconnaissance
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 0
in defined term set: NRDAX families
term code: reconnaissance

response_amp
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 2
in defined term set: NRDAX families
term code: response_amp

rpc_handler_cpu
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 1
in defined term set: NRDAX families
term code: rpc_handler_cpu

state_import_abuse
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 1
in defined term set: NRDAX families
term code: state_import_abuse

subscription_cpu_amp
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 1
in defined term set: NRDAX families
term code: subscription_cpu_amp

supply-chain
type: DefinedTerm
additional property: techniqueCount
  type: PropertyValue
  value: 11
in defined term set: NRDAX families
term code: supply-chain

Addr Message Counter Overflow Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: gossip_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: litecoin
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2024-01-01
description: CVE-2024-52919 (GHSA-qwp9-p9rr-h729): addr flood → CAddrMan 32-bit nIdCount overflow → assertion abort
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0001

PropertyValue
property ID: NRDAX
value: NRDAX-T0001

Alert Message Ordering Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2016-01-01
description: Alert Message Ordering Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0002

PropertyValue
property ID: NRDAX
value: NRDAX-T0002

Arithmetic Bug Fund Miscalculation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: polkadot
  value: solana
  value: stellar
date created: 2022-01-01
description: Arithmetic Bug Fund Miscalculation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0003

PropertyValue
property ID: NRDAX
value: NRDAX-T0003

Arithmetic Edge-Case Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: conflux
  value: cosmos
  value: ethereum
  value: xrp
date created: 2020-01-01
description: Arithmetic Edge-Case Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0004

PropertyValue
property ID: NRDAX
value: NRDAX-T0004

Array Deserialization Memcpy Corruption
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: monero
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2019-01-01
description: CVE-2018-3972 (TALOS-2018-0637): Levin array-of-arrays (0x8D) → epee read_ae POD memcpy → memory corruption
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0005

PropertyValue
property ID: NRDAX
value: NRDAX-T0005

Async Runtime Blocking VM Execution
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: iota
  value: solana
additional property: instanceCount
  type: PropertyValue
  value: 3
additional property: knownChains
  type: PropertyValue
  value: sui
date created: 2026-07-09
description: The simulateTransaction RPC handler executes the BPF VM synchronously on the calling Tokio worker thread (no spawn_blocking interposed), and because sigVerify defaults off and simulation is gas-free, an attacker can submit CU-maximizing transactions against pre-loaded programs at no cost. Each concurrent request pins a shared executor thread for the full simulation duration, so per-worker throughput degrades proportionally to concurrent request count, exhausting the bounded async worker pool and starving all other RPC handlers sharing it. The fix-class is interposing async offload (spawn_blocking / dedicated thread pool with backpressure) plus request-side CU/cost accounting for simulate calls, not just on-chain compute budgets.
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0006

PropertyValue
property ID: NRDAX
value: NRDAX-T0006

Authentication Message Replay
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2021-01-01
description: Authentication Message Replay
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0007

PropertyValue
property ID: NRDAX
value: NRDAX-T0007

Authorization Check Bypass RCE
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
date created: 2026-01-01
description: Authorization Check Bypass RCE
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0008

PropertyValue
property ID: NRDAX
value: NRDAX-T0008

Bit-Length Validation Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Bit-Length Validation Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0009

PropertyValue
property ID: NRDAX
value: NRDAX-T0009

Block Processing Use-After-Free Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2020-01-01
description: Block Processing Use-After-Free Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0010

PropertyValue
property ID: NRDAX
value: NRDAX-T0010

Block Replay Race Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Block Replay Race Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0011

PropertyValue
property ID: NRDAX
value: NRDAX-T0011

Block Timestamp Validation Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: ethereum
  value: nimiq
  value: zcash
date created: 2020-01-01
description: Block Timestamp Validation Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0012

PropertyValue
property ID: NRDAX
value: NRDAX-T0012

Bloom Filter Divide-By-Zero Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-01
description: CVE-2013-5700: empty BIP37 bloom filter → modulo-by-zero in CBloomFilter::Hash() → crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0013

PropertyValue
property ID: NRDAX
value: NRDAX-T0013

Certificate Revocation Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: aws-lc
date created: 2020-01-01
description: Certificate Revocation Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0014

PropertyValue
property ID: NRDAX
value: NRDAX-T0014

Chain ID Validation Missing
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2022-01-01
description: Chain ID Validation Missing
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0015

PropertyValue
property ID: NRDAX
value: NRDAX-T0015

ChainSync Jumping Protocol DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cardano
  value: solana
date created: 2020-01-01
description: ChainSync Jumping Protocol DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0016

PropertyValue
property ID: NRDAX
value: NRDAX-T0016

Channel Access Control Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2019-01-01
description: Channel Access Control Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0017

PropertyValue
property ID: NRDAX
value: NRDAX-T0017

Channel Close State Race Stranding
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2020-01-01
description: Channel Close State Race Stranding
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0018

PropertyValue
property ID: NRDAX
value: NRDAX-T0018

Channel Open Error Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: bridge
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Channel Open Error Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0019

PropertyValue
property ID: NRDAX
value: NRDAX-T0019

Checkpoint Snapshot Signer Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2020-01-01
description: Checkpoint Snapshot Signer Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0020

PropertyValue
property ID: NRDAX
value: NRDAX-T0020

Claim Migration Fund Drain
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: bridge
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2022-01-01
description: Claim Migration Fund Drain
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0021

PropertyValue
property ID: NRDAX
value: NRDAX-T0021

Client Library Supply Chain Compromise
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: any
  value: monero
  value: pnpm
  value: solana
  value: sui
  value: unknown
  value: xrp
date created: 2024-01-01
description: Client Library Supply Chain Compromise
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0022

PropertyValue
property ID: NRDAX
value: NRDAX-T0022

Coalesced Packet Buffer Leak
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-11
description: QUIC-LEAK / CVE-2025-54939: LSQUIC pre-handshake `packet_in` memory leak from coalesced Initial packets (CVSS 7.5 AV:N/AC:L/PR:N/UI:N/A:H, CWE-401+CWE-770; affected LSQUIC < 4.3.1, fixed 4.3.1 / OpenL
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0023

PropertyValue
property ID: NRDAX
value: NRDAX-T0023

Compact Block FillBlock Duplicate Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-07
description: CVE-2024-35202: blocktxn with txns not committed to the block merkle root → FillBlock called twice → assertion + node exit (Bitcoin Core <25.0)
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0024

PropertyValue
property ID: NRDAX
value: NRDAX-T0024

Compact Block Size Integer Overflow
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-02
description: CVE-2025-46597: cmpctblock declaring >1GB short-ids → 32-bit size-calc overflow
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0025

PropertyValue
property ID: NRDAX
value: NRDAX-T0025

Compiler Execution Order Bug
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2024-01-01
description: Compiler Execution Order Bug
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0026

PropertyValue
property ID: NRDAX
value: NRDAX-T0026

Compressed Message Checksum Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2020-01-01
description: Compressed Message Checksum Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0027

PropertyValue
property ID: NRDAX
value: NRDAX-T0027

Compressed Message Decompression Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
  value: libp2p
  value: tron
  value: xrp
date created: 2021-01-01
description: Compressed Message Decompression Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0028

PropertyValue
property ID: NRDAX
value: NRDAX-T0028

Concurrent RPC Race Nil-Deref Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
  value: fantom
date created: 2020-01-01
description: Concurrent RPC Race Nil-Deref Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0029

PropertyValue
property ID: NRDAX
value: NRDAX-T0029

Connection Failure Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
  value: solana
  value: ton
date created: 2020-01-01
description: Connection Failure Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0030

PropertyValue
property ID: NRDAX
value: NRDAX-T0030

Consensus Deadlock Vote Race
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Consensus Deadlock Vote Race
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0031

PropertyValue
property ID: NRDAX
value: NRDAX-T0031

Consensus Future Vote OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Consensus Future Vote OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0032

PropertyValue
property ID: NRDAX
value: NRDAX-T0032

Consensus Message Crash DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
  value: near
  value: solana
date created: 2020-01-01
description: Consensus Message Crash DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0033

PropertyValue
property ID: NRDAX
value: NRDAX-T0033

Container Escape via Dependency
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: general
  value: npm
  value: unknown
date created: 2019-01-01
description: Container Escape via Dependency
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0034

PropertyValue
property ID: NRDAX
value: NRDAX-T0034

Contract Activation Compute Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Contract Activation Compute Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0035

PropertyValue
property ID: NRDAX
value: NRDAX-T0035

Contract Execution Engine Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: near
date created: 2020-01-01
description: Contract Execution Engine Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0036

PropertyValue
property ID: NRDAX
value: NRDAX-T0036

Contract Logic Validation Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: polkadot
  value: solana
  value: stellar
date created: 2022-01-01
description: Contract Logic Validation Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0037

PropertyValue
property ID: NRDAX
value: NRDAX-T0037

Count Underflow Header Serving Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-07
description: CVE-2024-32972: eth GetBlockHeaders amount=0 → count-1 underflows to UINT64_MAX → bypasses maxHeadersServe → serves all headers to genesis → memory exhaustion (geth <1.13.15)
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0038

PropertyValue
property ID: NRDAX
value: NRDAX-T0038

Crafted Packet Node Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: bridge
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Crafted Packet Node Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0039

PropertyValue
property ID: NRDAX
value: NRDAX-T0039

Crafted Transaction Processing DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: aptos
  value: bitcoin
  value: cardano
  value: conflux
  value: cosmos
  value: ethereum_l2
  value: near
  value: solana
  value: stellar
  value: xrp
date created: 2025-01-01
description: Crafted Transaction Processing DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0040

PropertyValue
property ID: NRDAX
value: NRDAX-T0040

Cross-Chain Peer Pool Pollution
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2026-07-08
description: Alien Attack (SlowMist 'peer-pool pollution'): a same-family but DIFFERENT-chain peer completes the chain-agnostic RLPx ECIES handshake + devp2p Hello and is admitted to the eth handshake; the chain c
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0041

PropertyValue
property ID: NRDAX
value: NRDAX-T0041

Crypto Frame Reassembly Buffer Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-10
description: quiche QUIC CRYPTO-frame flood (CVE-2024-1765): flood of QUIC long-header packets each carrying a CRYPTO frame (type 0x06) whose offset escalates by a fixed stride (4096) — leaving the crypto reassemb
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0042

PropertyValue
property ID: NRDAX
value: NRDAX-T0042

Crypto Input Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
  value: general
date created: 2020-01-01
description: Crypto Input Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0043

PropertyValue
property ID: NRDAX
value: NRDAX-T0043

Data Limit Bypass State Bloat
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: monero
  value: solana
  value: xrp
  value: zcash
date created: 2023-01-01
description: Data Limit Bypass State Bloat
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0044

PropertyValue
property ID: NRDAX
value: NRDAX-T0044

Declare Transaction Compilation CPU Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Declare Transaction Compilation CPU Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0045

PropertyValue
property ID: NRDAX
value: NRDAX-T0045

Decompression Bomb Resource Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: ethereum
date created: 2019-01-01
description: quic-go HTTP/3 QPACK decompression-bomb memory exhaustion (CVE-2025-64702): a flood of QUIC v1 short-header (1-RTT) packets, each carrying a STREAM frame (type 0x0b) on a fresh client bidi stream whos
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0046

PropertyValue
property ID: NRDAX
value: NRDAX-T0046

Default Secret Token Forgery
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
date created: 2020-01-01
description: Default Secret Token Forgery
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0047

PropertyValue
property ID: NRDAX
value: NRDAX-T0047

Dependency Use-After-Free Corruption
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2026-01-01
description: Dependency Use-After-Free Corruption
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0048

PropertyValue
property ID: NRDAX
value: NRDAX-T0048

DHT PUT_VALUE Disk Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: libp2p
date created: 2026-01-01
description: DHT PUT_VALUE Disk Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0049

PropertyValue
property ID: NRDAX
value: NRDAX-T0049

DHT Sybil Content Censorship
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: gossip_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ipfs
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: ipfs
date created: 2023-01-01
description: CVE-2023-26248 / GHSA-mqr9-hjr8-2m9w: Content Censorship in IPFS via Kademlia DHT abuse. The libp2p Kademlia DHT (go-libp2p-kad-dht (Go; as shipped in go-ipfs/kubo), affected go-libp2p-kad-dht <= 0.20
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0050

PropertyValue
property ID: NRDAX
value: NRDAX-T0050

Dial Worker Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: Dial Worker Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0051

PropertyValue
property ID: NRDAX
value: NRDAX-T0051

DNS Rebinding SSRF Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: praisonai
date created: 2020-01-01
description: DNS Rebinding SSRF Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0052

PropertyValue
property ID: NRDAX
value: NRDAX-T0052

DNS Response Parsing Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2020-01-01
description: DNS Response Parsing Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0053

PropertyValue
property ID: NRDAX
value: NRDAX-T0053

DNSSEC Validation Bypass Cache Poisoning
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: dns
date created: 2020-01-01
description: DNSSEC Validation Bypass Cache Poisoning
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0054

PropertyValue
property ID: NRDAX
value: NRDAX-T0054

Duplicate-Input Block Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2018-01-01
description: Duplicate-Input Block Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0055

PropertyValue
property ID: NRDAX
value: NRDAX-T0055

Duplicate Input Validation-Bypass Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2026-07-08
description: CVE-2018-17144: a block whose tx spends one outpoint twice (duplicate inputs); the 0.14 pre-relay optimization (PR#9049) skipped the duplicate-input check → assert(!coin.IsNull()) crash (0.14.x) / sup
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0056

PropertyValue
property ID: NRDAX
value: NRDAX-T0056

Duplicate Proof Memory Leak DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Duplicate Proof Memory Leak DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0057

PropertyValue
property ID: NRDAX
value: NRDAX-T0057

Duplicate Record Constraint Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2020-01-01
description: Duplicate Record Constraint Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0058

PropertyValue
property ID: NRDAX
value: NRDAX-T0058

Duplicate Transport Parameter Memory Leak
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-11
description: msquic duplicate-transport-parameters VersionInfo leak (CVE-2024-26190): flood of QUIC v1 Initial packets (distinct SCID / new connection each), every Initial carrying a CRYPTO frame (type 0x06) whose
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0059

PropertyValue
property ID: NRDAX
value: NRDAX-T0059

Duplicate Transaction Memory Leak
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2023-01-01
description: Duplicate Transaction Memory Leak
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0060

PropertyValue
property ID: NRDAX
value: NRDAX-T0060

Duplicate Tx Mempool Index Desync
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-09
description: CVE-2023-34451 (GHSA-w24w-wp77-qffm): the mempool's list + map index each other and can desync so the SAME tx appears multiple times in the list and can no longer be fully removed (only a restart clea
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0061

PropertyValue
property ID: NRDAX
value: NRDAX-T0061

Dust Output Consensus Mishandling
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2021-01-01
description: Dust Output Consensus Mishandling
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0062

PropertyValue
property ID: NRDAX
value: NRDAX-T0062

Dust Value Griefing
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2021-01-01
description: Dust Value Griefing
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0063

PropertyValue
property ID: NRDAX
value: NRDAX-T0063

Endpoint Concurrency Cap Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
  value: http2
  value: ic
  value: iota
  value: kaspa
additional property: instanceCount
  type: PropertyValue
  value: 5
additional property: knownChains
  type: PropertyValue
  value: near
date created: 2026-07-04
description: cosmos-sdk server/grpc/server.go grpc.NewServer w/o grpc.MaxConcurrentStreams -> grpc-go default effectively unbounded + no SETTINGS_MAX_CONCURRENT_STREAMS signalled; attacker holds many HTTP/2 stream
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0064

PropertyValue
property ID: NRDAX
value: NRDAX-T0064

Engine API Deadlock
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Engine API Deadlock
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0065

PropertyValue
property ID: NRDAX
value: NRDAX-T0065

Epoch Boundary Crash Loop
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: near
  value: sui
date created: 2020-01-01
description: Epoch Boundary Crash Loop
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0066

PropertyValue
property ID: NRDAX
value: NRDAX-T0066

Epoch Height Source Lag Stall
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Epoch Height Source Lag Stall
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0067

PropertyValue
property ID: NRDAX
value: NRDAX-T0067

Equivocation Evidence Window Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Equivocation Evidence Window Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0068

PropertyValue
property ID: NRDAX
value: NRDAX-T0068

Equivocation Storm Liveness DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: polkadot
date created: 2020-01-01
description: Equivocation Storm Liveness DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0069

PropertyValue
property ID: NRDAX
value: NRDAX-T0069

Ethash Cache Generation Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2021-01-01
description: Ethash Cache Generation Memory Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0070

PropertyValue
property ID: NRDAX
value: NRDAX-T0070

Ethash Verification Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-09
description: CVE-2021-42219: go-ethereum v1.10.9 (and earlier pre-Merge ethash-verifying geth) — an unauthenticated remote peer floods a node with an excessive amount of block/header messages; to verify each block
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0071

PropertyValue
property ID: NRDAX
value: NRDAX-T0071

Event Stream Endpoint Crash DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2025-01-01
description: Event Stream Endpoint Crash DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0072

PropertyValue
property ID: NRDAX
value: NRDAX-T0072

Evidence Timestamp Inconsistency DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2021-01-01
description: Evidence Timestamp Inconsistency DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0073

PropertyValue
property ID: NRDAX
value: NRDAX-T0073

EVM Memory Corruption Consensus Split
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2021-01-01
description: EVM Memory Corruption Consensus Split
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0074

PropertyValue
property ID: NRDAX
value: NRDAX-T0074

EVM Opcode/Precompile Semantics Divergence
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
  value: polkadot
date created: 2021-01-01
description: EVM Opcode/Precompile Semantics Divergence
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0075

PropertyValue
property ID: NRDAX
value: NRDAX-T0075

Expensive Debug RPC Compute Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: monero
  value: sui
date created: 2026-07-01
description: debug_traceCall compute amplification (geth: debug API is DoS-prone, do not expose)
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0076

PropertyValue
property ID: NRDAX
value: NRDAX-T0076

Fast Sync Pivot Failure Abort
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2020-01-01
description: Fast Sync Pivot Failure Abort
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0077

PropertyValue
property ID: NRDAX
value: NRDAX-T0077

Fee-Bump Replacement Policy Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2021-01-01
description: Fee-Bump Replacement Policy Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0078

PropertyValue
property ID: NRDAX
value: NRDAX-T0078

Field Element Comparison Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: stellar
date created: 2026-01-01
description: Field Element Comparison Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0079

PropertyValue
property ID: NRDAX
value: NRDAX-T0079

Finality Justification Cache Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: filecoin
date created: 2025-01-01
description: Finality Justification Cache Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0080

PropertyValue
property ID: NRDAX
value: NRDAX-T0080

Force-Retire Integer Overflow Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
date created: 2020-01-01
description: Force-Retire Integer Overflow Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0081

PropertyValue
property ID: NRDAX
value: NRDAX-T0081

Forged Commit Future Height Light Client Attack
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Forged Commit Future Height Light Client Attack
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0082

PropertyValue
property ID: NRDAX
value: NRDAX-T0082

Frame Parsing Memory Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: avalanche
  value: conflux
  value: quic
date created: 2026-01-01
description: Frame Parsing Memory Amplification
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0083

PropertyValue
property ID: NRDAX
value: NRDAX-T0083

Gas Accounting Panic Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Gas Accounting Panic Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0084

PropertyValue
property ID: NRDAX
value: NRDAX-T0084

Gas Limit Capacity Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: avalanche
date created: 2020-01-01
description: Gas Limit Capacity Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0085

PropertyValue
property ID: NRDAX
value: NRDAX-T0085

Gas Price Margin Integer Overflow
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Gas Price Margin Integer Overflow
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0086

PropertyValue
property ID: NRDAX
value: NRDAX-T0086

Genesis Migration Timing Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Genesis Migration Timing Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0087

PropertyValue
property ID: NRDAX
value: NRDAX-T0087

GetData Request Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2026-07-01
description: CVE-2024-52920 class: oversized GETDATA processing load
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0088

PropertyValue
property ID: NRDAX
value: NRDAX-T0088

Gossip Attestation Index OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2020-01-01
description: Gossip Attestation Index OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0089

PropertyValue
property ID: NRDAX
value: NRDAX-T0089

Gossip Message Deadlock Stall
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: polkadot
date created: 2020-01-01
description: Gossip Message Deadlock Stall
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0090

PropertyValue
property ID: NRDAX
value: NRDAX-T0090

Gossip Message Quarantine Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2020-01-01
description: Gossip Message Quarantine Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0091

PropertyValue
property ID: NRDAX
value: NRDAX-T0091

Gossip Query Triggered DB Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2020-01-01
description: Gossip Query Triggered DB Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0092

PropertyValue
property ID: NRDAX
value: NRDAX-T0092

Gossipsub Mcache Config Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: Gossipsub Mcache Config Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0093

PropertyValue
property ID: NRDAX
value: NRDAX-T0093

Governance Proposal Panic Halt
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Governance Proposal Panic Halt
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0094

PropertyValue
property ID: NRDAX
value: NRDAX-T0094

GraphQL Alias Query Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2023-01-01
description: CVE-2023-42319: geth <=1.13.4 --http --graphql; a query with N aliased logs(filter:{fromBlock:0}) ops -> unbounded per-alias full-chain scan -> memory blowup
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0095

PropertyValue
property ID: NRDAX
value: NRDAX-T0095

GraphQL Nested Query Depth CPU Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2020-01-01
description: GraphQL Nested Query Depth CPU Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0096

PropertyValue
property ID: NRDAX
value: NRDAX-T0096

gRPC/H2 Multiplexing OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: iota
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-03
description: NullRabbit measurement (gRPC/h2 multiplex DoS).
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0097

PropertyValue
property ID: NRDAX
value: NRDAX-T0097

Guest Module Memory Corruption
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: ethereum_l2
  value: generic-wasm
  value: near
  value: solana
  value: wasmtime
date created: 2023-01-01
description: Guest Module Memory Corruption
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0098

PropertyValue
property ID: NRDAX
value: NRDAX-T0098

Half-Open Handshake Slowloris
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ic
  value: iota
  value: solana
  value: xrp
additional property: instanceCount
  type: PropertyValue
  value: 5
date created: 2026-07-01
description: IC quic_transport half-open QUIC handshake memory pin (IC_QUIC_HALFOPEN_PIN): a burst of QUIC v1 Initial packets (distinct SCID each) whose CRYPTO frame declares a large TLS handshake length (4096) bu
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0099

PropertyValue
property ID: NRDAX
value: NRDAX-T0099

Handshake Crypto CPU Burn
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: solana
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2023-01-01
description: Neodyme ND-FD1-MD-02: QUIC INITIAL flood → per-handshake x25519 + ed25519 sign-tile CPU exhaustion (compute-bound, distinct from the connection-slot flood)
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0100

PropertyValue
property ID: NRDAX
value: NRDAX-T0100

Handshake Crypto Validation Bypass Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-07
description: CVE-2025-24883: RLPx auth with an all-zero (off-curve) EC pubkey — geth <1.14.13 skips the secp256k1 point-validity check → handshake crypto crash (fixed 159fb1a)
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0101

PropertyValue
property ID: NRDAX
value: NRDAX-T0101

Handshake Key Validation Info Leak
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2026-01-01
description: Handshake Key Validation Info Leak
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0102

PropertyValue
property ID: NRDAX
value: NRDAX-T0102

Handshake Version String Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: near
  value: xrp
date created: 2020-01-01
description: Handshake Version String Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0103

PropertyValue
property ID: NRDAX
value: NRDAX-T0103

Hash Collision Forgery
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: stellar
date created: 2026-01-01
description: Hash Collision Forgery
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0104

PropertyValue
property ID: NRDAX
value: NRDAX-T0104

Hash Function Overflow Misbehavior
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: dogecoin
date created: 2020-01-01
description: Hash Function Overflow Misbehavior
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0105

PropertyValue
property ID: NRDAX
value: NRDAX-T0105

Header-Length Preallocation OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
  value: monero
  value: zcash
additional property: instanceCount
  type: PropertyValue
  value: 6
date created: 2026-07-01
description: CVE-2015-3641: header length field pre-allocates the receive buffer before the body → per-connection OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0106

PropertyValue
property ID: NRDAX
value: NRDAX-T0106

Headers Message Flood OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2019-01-01
description: Headers Message Flood OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0107

PropertyValue
property ID: NRDAX
value: NRDAX-T0107

HTLC Replay Init Order Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2020-01-01
description: HTLC Replay Init Order Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0108

PropertyValue
property ID: NRDAX
value: NRDAX-T0108

HTTP API Connection Hang DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: algorand
  value: ethereum
  value: zcash
date created: 2017-01-01
description: HTTP API Connection Hang DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0109

PropertyValue
property ID: NRDAX
value: NRDAX-T0109

HTTP Header Spoofing Trust Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: filecoin
date created: 2020-01-01
description: HTTP Header Spoofing Trust Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0110

PropertyValue
property ID: NRDAX
value: NRDAX-T0110

HTTP/2 Rapid Reset Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: http2
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: polkadot
date created: 2023-01-01
description: HTTP/2 Rapid Reset Memory Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0111

PropertyValue
property ID: NRDAX
value: NRDAX-T0111

HTTP/2 Rapid Reset Stream Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: polkadot
  value: walrus
additional property: instanceCount
  type: PropertyValue
  value: 2
additional property: knownChains
  type: PropertyValue
  value: avalanche
  value: ethereum
  value: tron
date created: 2023-01-01
description: CVE-2023-26964 (RUSTSEC-2023-0034): the Rust h2 crate < 0.3.17 does not release stream memory immediately on RST_STREAM and — pre-0.3.17 — has NO bound on streams in the pending-accept-but-remotely-re
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0112

PropertyValue
property ID: NRDAX
value: NRDAX-T0112

IBC Timeout Callback Reentrancy
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: bridge
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: IBC Timeout Callback Reentrancy
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0113

PropertyValue
property ID: NRDAX
value: NRDAX-T0113

ICMP PMTUD Injection Disruption
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: filecoin, libp2p, quic
date created: 2024-01-01
description: ICMP PMTUD Injection Disruption
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0114

PropertyValue
property ID: NRDAX
value: NRDAX-T0114

Implementation Divergence Chain Split
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
  value: zcash
date created: 2020-01-01
description: Implementation Divergence Chain Split
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0115

PropertyValue
property ID: NRDAX
value: NRDAX-T0115

Incomplete Packet Timer Overflow CPU Burn
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2022-01-01
description: Incomplete Packet Timer Overflow CPU Burn
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0116

PropertyValue
property ID: NRDAX
value: NRDAX-T0116

Index Out-Of-Bounds Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Index Out-Of-Bounds Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0117

PropertyValue
property ID: NRDAX
value: NRDAX-T0117

Integer Overflow Consensus Split
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: ethereum
date created: 2022-01-01
description: Integer Overflow Consensus Split
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0118

PropertyValue
property ID: NRDAX
value: NRDAX-T0118

Integer Overflow Decompression Infinite Loop
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: starknet
date created: 2025-01-01
description: Integer Overflow Decompression Infinite Loop
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0119

PropertyValue
property ID: NRDAX
value: NRDAX-T0119

Integer-Overflow Panic Control Message
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: gossip_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: libp2p
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: conflux
  value: ethereum
  value: libp2p
  value: near
  value: quic
date created: 2018-01-01
description: CVE-2026-34219 (+CVE-2026-33040): gossipsub ControlPrune backoff≈u64::MAX → Instant/Duration overflow panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0120

PropertyValue
property ID: NRDAX
value: NRDAX-T0120

Integer Overflow Parsing Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: namada
date created: 2020-01-01
description: Integer Overflow Parsing Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0121

PropertyValue
property ID: NRDAX
value: NRDAX-T0121

Integer Signedness Index OOB Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 2
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2026-07-07
description: CVE-2021-3121 (gogoproto 'skippy peanut butter'): unknown length-delimited field with a negative-length varint → pre-1.3.2 skip code does iNdEx+=length with no length<0 check → index out of bounds → p
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0122

PropertyValue
property ID: NRDAX
value: NRDAX-T0122

Interlink Mismatch Consensus Failure
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2026-01-01
description: Interlink Mismatch Consensus Failure
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0123

PropertyValue
property ID: NRDAX
value: NRDAX-T0123

INV Flood GetHeaders Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-01
description: CVE-2024-52915: INV with 50k items → 50k getheaders replies / send-buffer blowup
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0124

PropertyValue
property ID: NRDAX
value: NRDAX-T0124

Inv Message Flood OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: litecoin
date created: 2018-01-01
description: Inv Message Flood OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0125

PropertyValue
property ID: NRDAX
value: NRDAX-T0125

Inv Queue Draining CPU DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2023-01-01
description: Inv Queue Draining CPU DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0126

PropertyValue
property ID: NRDAX
value: NRDAX-T0126

Invalid Address Nil-Pointer Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: algorand
  value: ethereum
  value: libp2p
  value: solana
  value: sui
date created: 2020-01-01
description: Invalid Address Nil-Pointer Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0127

PropertyValue
property ID: NRDAX
value: NRDAX-T0127

Invalid Commit Signature Halt
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Invalid Commit Signature Halt
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0128

PropertyValue
property ID: NRDAX
value: NRDAX-T0128

Invalid Curve Point Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: zcash
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-07
description: CVE-2026-41584 (GHSA-452v-w3gx-72wg): a V5/NU5 tx whose Orchard action rk is the IDENTITY point [0x00;32] — a canonical point the spec allows, so it passes parse + hash() — but Orchard proof verificat
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0129

PropertyValue
property ID: NRDAX
value: NRDAX-T0129

Invalid Finality Signature Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: bridge
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: substrate
date created: 2025-01-01
description: Invalid Finality Signature Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0130

PropertyValue
property ID: NRDAX
value: NRDAX-T0130

Invalid Message Log Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-01
description: CVE-2025-54605: flood of PoW-invalid blocks logged unconditionally → log/disk fill
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0131

PropertyValue
property ID: NRDAX
value: NRDAX-T0131

Invariant Check Spam CPU Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Invariant Check Spam CPU Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0132

PropertyValue
property ID: NRDAX
value: NRDAX-T0132

Iterator Length Mismatch Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Iterator Length Mismatch Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0133

PropertyValue
property ID: NRDAX
value: NRDAX-T0133

JSON Deserialization RCE
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: tron
date created: 2020-01-01
description: JSON Deserialization RCE
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0134

PropertyValue
property ID: NRDAX
value: NRDAX-T0134

L1 Finality Assumption Reorg
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cardano
date created: 2025-01-01
description: L1 Finality Assumption Reorg
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0135

PropertyValue
property ID: NRDAX
value: NRDAX-T0135

Large Trie Commit Batch Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Large Trie Commit Batch Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0136

PropertyValue
property ID: NRDAX
value: NRDAX-T0136

Latent Consensus Decision Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Latent Consensus Decision Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0137

PropertyValue
property ID: NRDAX
value: NRDAX-T0137

Leader Election Manipulation Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: sui
date created: 2020-01-01
description: Leader Election Manipulation Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0138

PropertyValue
property ID: NRDAX
value: NRDAX-T0138

Legacy Sighash Quadratic CPU Blowup
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-01
description: CVE-2025-46598: non-standard tx with many legacy-sighash inputs → quadratic validation CPU, no peer penalty
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0139

PropertyValue
property ID: NRDAX
value: NRDAX-T0139

Log Injection RCE
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2021-01-01
description: Log Injection RCE
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0140

PropertyValue
property ID: NRDAX
value: NRDAX-T0140

Low-Fee Transaction Spam Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2019-01-01
description: Low-Fee Transaction Spam Flood
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0141

PropertyValue
property ID: NRDAX
value: NRDAX-T0141

Malformed Bytecode Index Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: rpc_handler_cpu
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: sui
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: aptos
date created: 2026-07-02
description: CertiK Skyfall: Publish RPC disassembles a malformed Move module (empty code_unit) → index panic → RPC crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0142

PropertyValue
property ID: NRDAX
value: NRDAX-T0142

Malformed Field Gossip Before Validation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-07
description: GHSA-hrhf-2vcr-ghch (ASA-2025-003): a BitArray whose declared Bits does not match its Elems count (len(Elems) != ceil(Bits/64)) is processed in an invalid state and gossiped to peers before validation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0143

PropertyValue
property ID: NRDAX
value: NRDAX-T0143

Malformed GETDATA Infinite Loop
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2024-01-01
description: Malformed GETDATA Infinite Loop
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0144

PropertyValue
property ID: NRDAX
value: NRDAX-T0144

Malformed HTTP Body Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: zcash
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-09
description: CVE-2026-41585 (GHSA-29x4-r6jv-ff4w): Zebra's JSON-RPC HTTP middleware treated a failure to read the incoming HTTP request body as an unrecoverable error, aborting the process instead of returning an
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0145

PropertyValue
property ID: NRDAX
value: NRDAX-T0145

Malformed HTTP Header Parsing Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: stellar
date created: 2020-01-01
description: Malformed HTTP Header Parsing Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0146

PropertyValue
property ID: NRDAX
value: NRDAX-T0146

Malformed HTTP/3 Frame Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: Malformed HTTP/3 Frame Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0147

PropertyValue
property ID: NRDAX
value: NRDAX-T0147

Malformed KZG Proof Mismatch DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-07
description: CVE-2026-22868 (CVSS 7.5): a batch of EIP-4844 type-3 blob txs announced then delivered (PooledTransactions) with structurally-valid KZG sidecars whose commitment/proof (over blob A) mismatch the carr
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0148

PropertyValue
property ID: NRDAX
value: NRDAX-T0148

Malformed Protocol Message Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: cardano
  value: conflux
  value: cosmos
  value: ethereum
  value: filecoin
  value: libp2p
  value: monero
  value: near
  value: nimiq
  value: polkadot
  value: quic
  value: solana
  value: xrp
  value: zcash
date created: 2020-01-01
description: Malformed Protocol Message Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0149

PropertyValue
property ID: NRDAX
value: NRDAX-T0149

Malformed SOCKS Response Infinite Loop
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2013-01-01
description: Malformed SOCKS Response Infinite Loop
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0150

PropertyValue
property ID: NRDAX
value: NRDAX-T0150

Malformed Transaction Field Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: namada
  value: solana
  value: sui
  value: zcash
date created: 2026-01-01
description: Malformed Transaction Field Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0151

PropertyValue
property ID: NRDAX
value: NRDAX-T0151

Malformed UPnP Response Infinite Loop
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2024-01-01
description: Malformed UPnP Response Infinite Loop
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0152

PropertyValue
property ID: NRDAX
value: NRDAX-T0152

Mempool Computational Complexity DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: namada
date created: 2020-01-01
description: Mempool Computational Complexity DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0153

PropertyValue
property ID: NRDAX
value: NRDAX-T0153

Mempool Deadlock DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cardano
date created: 2020-01-01
description: Mempool Deadlock DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0154

PropertyValue
property ID: NRDAX
value: NRDAX-T0154

Mempool Flood Eviction
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: cardano
  value: ethereum
date created: 2022-01-01
description: Mempool Flood Eviction
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0155

PropertyValue
property ID: NRDAX
value: NRDAX-T0155

Mempool Pending Eviction Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-07
description: CVE-2022-23328 (go-ethereum, CVSS 7.5, all versions <1.10.13): an attacker node sends 5120 PENDING high-gas-price txns from ONE account that each fully spend the account's FULL BALANCE, in one eth Tra
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0156

PropertyValue
property ID: NRDAX
value: NRDAX-T0156

Mempool Sender Spoofing Resource Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
date created: 2020-01-01
description: Mempool Sender Spoofing Resource Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0157

PropertyValue
property ID: NRDAX
value: NRDAX-T0157

Merkle Proof Forgery
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2017-01-01
description: Merkle Proof Forgery
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0158

PropertyValue
property ID: NRDAX
value: NRDAX-T0158

Merkle Trie Memory Leak
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: algorand
date created: 2020-01-01
description: Merkle Trie Memory Leak
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0159

PropertyValue
property ID: NRDAX
value: NRDAX-T0159

Message Field Integer Overflow OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2024-01-01
description: Message Field Integer Overflow OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0160

PropertyValue
property ID: NRDAX
value: NRDAX-T0160

Metric Collection Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: Metric Collection Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0161

PropertyValue
property ID: NRDAX
value: NRDAX-T0161

Metrics Endpoint Resource Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cardano
  value: solana
date created: 2020-01-01
description: Metrics Endpoint Resource Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0162

PropertyValue
property ID: NRDAX
value: NRDAX-T0162

Mining Pool Auth Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2018-01-01
description: Mining Pool Auth Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0163

PropertyValue
property ID: NRDAX
value: NRDAX-T0163

Missing Crypto Provider Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: polkadot
date created: 2020-01-01
description: Missing Crypto Provider Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0164

PropertyValue
property ID: NRDAX
value: NRDAX-T0164

Missing Zero-Guard Divide-By-Zero Halt
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2026-07-07
description: GHSA-x5vx-95h7-rv4p (cosmos-sdk <=0.47.15/<=0.50.11): x/group PercentageDecisionPolicy.Allow does yesCount.Quo(totalPower) with no totalPower==0 guard; a proposal on a group whose weight is driven to
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0165

PropertyValue
property ID: NRDAX
value: NRDAX-T0165

Move Verifier Fixpoint CPU Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: sui
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-02
description: CertiK Skyfall HamsterWheel: crafted-CFG Move module defeats id_leak_verifier fixpoint → infinite re-analysis → CPU halt
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0166

PropertyValue
property ID: NRDAX
value: NRDAX-T0166

Nested Execution State Corruption
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Nested Execution State Corruption
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0167

PropertyValue
property ID: NRDAX
value: NRDAX-T0167

Network Partition Consensus Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: sui
date created: 2020-01-01
description: Network Partition Consensus Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0168

PropertyValue
property ID: NRDAX
value: NRDAX-T0168

Network Reconnaissance Scanning
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
date created: 2020-01-01
description: Network Reconnaissance Scanning
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0169

PropertyValue
property ID: NRDAX
value: NRDAX-T0169

Network-Triggered Runtime DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
  value: filecoin
  value: monero
date created: 2020-01-01
description: Network-Triggered Runtime DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0170

PropertyValue
property ID: NRDAX
value: NRDAX-T0170

Nil Node Dereference Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 2
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: cosmos
  value: fantom
  value: filecoin
date created: 2026-07-02
description: CVE-2020-26264: a crafted LES GetProofsV2 storage-proof request (non-empty AccKey for a non-existent account) dereferences a nil account trie in the les server's GetProofsV2 handler → panic/crash (get
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0171

PropertyValue
property ID: NRDAX
value: NRDAX-T0171

Nil Reference Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Nil Reference Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0172

PropertyValue
property ID: NRDAX
value: NRDAX-T0172

Nil Response Consensus Engine Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: avalanche
date created: 2020-01-01
description: Nil Response Consensus Engine Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0173

PropertyValue
property ID: NRDAX
value: NRDAX-T0173

Non-Exploitable Cryptographic Defect
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libcrux
  value: multiple
date created: 2020-01-01
description: Non-Exploitable Cryptographic Defect
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0174

PropertyValue
property ID: NRDAX
value: NRDAX-T0174

Nonce Sequencing Proposal Degradation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Nonce Sequencing Proposal Degradation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0175

PropertyValue
property ID: NRDAX
value: NRDAX-T0175

Nondeterministic Execution Consensus Split
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2021-01-01
description: Nondeterministic Execution Consensus Split
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0176

PropertyValue
property ID: NRDAX
value: NRDAX-T0176

Notification Handle Drop CPU Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: polkadot
date created: 2020-01-01
description: Notification Handle Drop CPU Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0177

PropertyValue
property ID: NRDAX
value: NRDAX-T0177

Null-Deref Crash via Crafted Input
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2021-01-01
description: Null-Deref Crash via Crafted Input
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0178

PropertyValue
property ID: NRDAX
value: NRDAX-T0178

Numeric Field Parsing Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cardano
date created: 2020-01-01
description: Numeric Field Parsing Memory Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0179

PropertyValue
property ID: NRDAX
value: NRDAX-T0179

OIDC Identity Verification Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: coder
date created: 2026-01-01
description: OIDC Identity Verification Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0180

PropertyValue
property ID: NRDAX
value: NRDAX-T0180

Onion Message Parsing OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2024-01-01
description: Onion Message Parsing OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0181

PropertyValue
property ID: NRDAX
value: NRDAX-T0181

Optimistic ACK Congestion Window Manipulation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-10
description: quiche optimistic-ACK congestion-window growth (CVE-2025-4820): a QUIC peer completes a handshake, initiates a congestion-controlled transfer toward itself, then sends ACK frames (type 0x02 / 0x03) ac
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0182

PropertyValue
property ID: NRDAX
value: NRDAX-T0182

Orphan Transaction Processing DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2024-01-01
description: Orphan Transaction Processing DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0183

PropertyValue
property ID: NRDAX
value: NRDAX-T0183

Orphan Tx Resolution CPU Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: litecoin
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-01
description: CVE-2024-52914: orphan-tx re-resolution O(outputs × 100 orphans) of expensive txs → multi-hour CPU stall
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0184

PropertyValue
property ID: NRDAX
value: NRDAX-T0184

Out-Of-Order Stream Reassembly OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-10
description: quinn-proto out-of-order stream reassembly memory exhaustion (GHSA-4w2j-m93h-cj5j / RUSTSEC-2026-0185, CVSS 7.5 AV:N/AC:L/PR:N/UI:N/A:H, CWE-770; affected quinn-proto < 0.11.15, fixed 0.11.15). An una
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0185

PropertyValue
property ID: NRDAX
value: NRDAX-T0185

Oversized Block Execution Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Oversized Block Execution Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0186

PropertyValue
property ID: NRDAX
value: NRDAX-T0186

Oversized Block Response Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-04
description: CometBFT BlocksyncChannel(0x40) oversized BlockResponse (up to 9000 CommitSigs, ~900KB): the Block decode + ValidateBasic at https://github.com/cometbft/cometbft/blob/v0.38.22/blocksync/reactor.go is
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0187

PropertyValue
property ID: NRDAX
value: NRDAX-T0187

Oversized Control-Message Array CPU Burn
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: gossip_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: libp2p
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: conflux
  value: libp2p
date created: 2026-01-01
description: CVE-2026-49866: gossipsub oversized IHAVE/IWANT control-message arrays (huge messageID lists) → per-ID processing → CPU DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0188

PropertyValue
property ID: NRDAX
value: NRDAX-T0188

Oversized Field Buffer Overflow
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
  value: ethereum
  value: filecoin
  value: xrp
date created: 2020-01-01
description: Oversized Field Buffer Overflow
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0189

PropertyValue
property ID: NRDAX
value: NRDAX-T0189

Oversized Hex String Parsing CPU Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: tron
date created: 2020-01-01
description: Oversized Hex String Parsing CPU Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0190

PropertyValue
property ID: NRDAX
value: NRDAX-T0190

Oversized Script Validation Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2022-01-01
description: Oversized Script Validation Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0191

PropertyValue
property ID: NRDAX
value: NRDAX-T0191

Oversized Transaction Block-Fill
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: gossip_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: zcash
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: bsc
date created: 2024-01-01
description: CVE-2019-11636 (Zcash 'Sapling Wood-Chipper'): Zcash 2.x raised the max transaction size from 100 KB to the full block size after Sapling, letting an attacker cheaply build block-filling shielded txs
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0192

PropertyValue
property ID: NRDAX
value: NRDAX-T0192

P2P Layer Memory Leak OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: near
  value: polkadot
  value: sui
date created: 2020-01-01
description: P2P Layer Memory Leak OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0193

PropertyValue
property ID: NRDAX
value: NRDAX-T0193

P2P Message Race Condition Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: avalanche
  value: bitcoin
  value: fantom
  value: libp2p
  value: stellar
date created: 2024-01-01
description: P2P Message Race Condition Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0194

PropertyValue
property ID: NRDAX
value: NRDAX-T0194

Path Challenge Response Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-10
description: quic-go QUIC path-validation memory exhaustion (CVE-2023-49295): flood of QUIC v1 short-header (1-RTT) packets each carrying PATH_CHALLENGE frame(s) (type 0x1a + 8B challenge data). Each PATH_CHALLENG
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0195

PropertyValue
property ID: NRDAX
value: NRDAX-T0195

Path Migration Challenge Queue Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-10
description: quiche QUIC PATH_CHALLENGE unbounded-queue flood (CVE-2023-6193): flood of QUIC 1-RTT short-header packets on one DCID arriving from CHANGING source paths (rotating loopback 4-tuples = QUIC connection
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0196

PropertyValue
property ID: NRDAX
value: NRDAX-T0196

Payload Window Overflow Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: icp
date created: 2020-01-01
description: Payload Window Overflow Memory Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0197

PropertyValue
property ID: NRDAX
value: NRDAX-T0197

Peer List Sort CPU Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cardano
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-07
description: Cardano PeerSharing MsgShareRequest O(N log N) sort CPU amp: sortBy+hashWithSalt over the ~3000-peer known set per request (~170 us), no idle timeout (Codec.hs:160), no per-peer rate limit. One post-h
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0198

PropertyValue
property ID: NRDAX
value: NRDAX-T0198

Peer-Record Flood OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: gossip_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: libp2p
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: ethereum
  value: libp2p
  value: solana
date created: 2023-01-01
description: CVE-2023-40583: unchecked signed peer-record flood (peer-exchange) → go-libp2p peerstore OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0199

PropertyValue
property ID: NRDAX
value: NRDAX-T0199

Peer Record Signature Bypass Impersonation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: Peer Record Signature Bypass Impersonation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0200

PropertyValue
property ID: NRDAX
value: NRDAX-T0200

Peer Reputation Demotion Race Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
date created: 2020-01-01
description: Peer Reputation Demotion Race Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0201

PropertyValue
property ID: NRDAX
value: NRDAX-T0201

Peer Timestamp Skew Manipulation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-08
description: Timejacking (SlowMist Blockchain Common Vulnerability List; Culubas 2011): N peers advertise a version.timestamp skewed ~+70min (inside the AddTimeData ±70min acceptance window) → each peer's derived
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0202

PropertyValue
property ID: NRDAX
value: NRDAX-T0202

Ping Flood Pending Frame OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: libp2p
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-11
description: CVE-2024-32984 (GHSA-3999-5ffv-wp2r): rust-yamux (0.13.0 .. <0.13.2) buffers frames-to-send in an unbounded `pending_frames` VecDeque. A remote peer floods Ping frames (each enqueues a Pong reply) and
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0203

PropertyValue
property ID: NRDAX
value: NRDAX-T0203

Pre-Handshake Buffer Reservation Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2020-01-01
description: Pre-Handshake Buffer Reservation Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0204

PropertyValue
property ID: NRDAX
value: NRDAX-T0204

Pre-Handshake Crypto CPU Burn
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
  value: casper
  value: conflux
  value: cosmos
  value: icon
  value: libp2p
  value: qtum
  value: xrp
additional property: instanceCount
  type: PropertyValue
  value: 8
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2022-01-01
description: Bitcoin Core BIP-324 v2 transport pre-auth CPU burn: the 64-byte inbound ellswift key triggers secp256k1 ellswift ECDH + HKDF-SHA256 BEFORE any auth/rate-limit; only the soft 125-inbound cap gates, ac
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0205

PropertyValue
property ID: NRDAX
value: NRDAX-T0205

Pre-Handshake Packet Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-01
description: EL-2026-06 (EF public-disclosure): RLPx pre-auth packet flood → CPU/bandwidth exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0206

PropertyValue
property ID: NRDAX
value: NRDAX-T0206

Pre-Verify Gossip Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-04
description: CometBFT consensus DataChannel(0x21) ProposalMessage flood: valid-shape Proposal passes ValidateBasic but the RLock+queue path runs before deferred sig-verify — the N1.4 family HEAD (vote-flood + bloc
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0207

PropertyValue
property ID: NRDAX
value: NRDAX-T0207

Precompile Cryptographic Miscomputation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: polkadot
date created: 2025-01-01
description: Precompile Cryptographic Miscomputation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0208

PropertyValue
property ID: NRDAX
value: NRDAX-T0208

Predicate Verification Liveness DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: avalanche
date created: 2020-01-01
description: Predicate Verification Liveness DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0209

PropertyValue
property ID: NRDAX
value: NRDAX-T0209

Premature Disconnect Request Handling Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2026-01-01
description: Premature Disconnect Request Handling Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0210

PropertyValue
property ID: NRDAX
value: NRDAX-T0210

Premature Processing Index-Out-Of-Range Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-07
description: GHSA-p7mv-53f2-4cwj (ASA-2024-011): a Precommit with a non-nil BlockID + an attached vote extension is handled BEFORE the ValidatorIndex is verified → out-of-range ValidatorIndex → index-out-of-range
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0211

PropertyValue
property ID: NRDAX
value: NRDAX-T0211

Proof Verification Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2026-01-01
description: Proof Verification Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0212

PropertyValue
property ID: NRDAX
value: NRDAX-T0212

Protocol Message CPU Burn
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2026-01-01
description: Protocol Message CPU Burn
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0213

PropertyValue
property ID: NRDAX
value: NRDAX-T0213

Protocol Message Flood Unbounded Goroutine
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: algorand
  value: ethereum
date created: 2023-01-01
description: CVE-2023-40591: post-Hello devp2p PING (0x02) flood → unbounded goroutines → OOM (geth 1.10.0-1.12.0)
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0214

PropertyValue
property ID: NRDAX
value: NRDAX-T0214

Quic 0-RTT Race Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: Quic 0-RTT Race Memory Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0215

PropertyValue
property ID: NRDAX
value: NRDAX-T0215

QUIC Accept Error Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: QUIC Accept Error Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0216

PropertyValue
property ID: NRDAX
value: NRDAX-T0216

QUIC Amplification Limit Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2026-01-01
description: QUIC Amplification Limit Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0217

PropertyValue
property ID: NRDAX
value: NRDAX-T0217

Quic Chunks Drop Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: Quic Chunks Drop Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0218

PropertyValue
property ID: NRDAX
value: NRDAX-T0218

Quic Client Hello Fragmentation Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: Quic Client Hello Fragmentation Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0219

PropertyValue
property ID: NRDAX
value: NRDAX-T0219

QUIC Close Frame Parsing Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: QUIC Close Frame Parsing Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0220

PropertyValue
property ID: NRDAX
value: NRDAX-T0220

QUIC Congestion Control Manipulation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
  value: quic
date created: 2025-01-01
description: QUIC Congestion Control Manipulation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0221

PropertyValue
property ID: NRDAX
value: NRDAX-T0221

QUIC Connection ID Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2024-01-01
description: QUIC Connection ID Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0222

PropertyValue
property ID: NRDAX
value: NRDAX-T0222

QUIC Connection ID Retirement Infinite Loop
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2025-01-01
description: QUIC Connection ID Retirement Infinite Loop
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0223

PropertyValue
property ID: NRDAX
value: NRDAX-T0223

QUIC Connection Migration Duplicate-ID Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: QUIC Connection Migration Duplicate-ID Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0224

PropertyValue
property ID: NRDAX
value: NRDAX-T0224

QUIC Control Frame Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2026-07-11
description: s2n-quic stream-limit exhaustion (GHSA-475v-pq2g-fp9g): pre-patch `RemoteInitiated::on_close_stream` directly bumped `max_streams_sync` with NO rate limiting, so every close of a remote-initiated stre
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0225

PropertyValue
property ID: NRDAX
value: NRDAX-T0225

QUIC Crypto Frame Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2024-01-01
description: QUIC Crypto Frame Flood
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0226

PropertyValue
property ID: NRDAX
value: NRDAX-T0226

QUIC Datagram Fragmentation Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: hysteria
date created: 2020-01-01
description: QUIC Datagram Fragmentation Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0227

PropertyValue
property ID: NRDAX
value: NRDAX-T0227

QUIC Decryption Overflow Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: QUIC Decryption Overflow Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0228

PropertyValue
property ID: NRDAX
value: NRDAX-T0228

QUIC Early Data Processing Disclosure
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: QUIC Early Data Processing Disclosure
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0229

PropertyValue
property ID: NRDAX
value: NRDAX-T0229

QUIC Empty Header Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: QUIC Empty Header Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0230

PropertyValue
property ID: NRDAX
value: NRDAX-T0230

QUIC Handshake State Confusion Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
  value: quic
  value: solana
date created: 2025-01-01
description: QUIC Handshake State Confusion Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0231

PropertyValue
property ID: NRDAX
value: NRDAX-T0231

QUIC/HTTP3 Header Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2026-01-01
description: QUIC/HTTP3 Header Memory Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0232

PropertyValue
property ID: NRDAX
value: NRDAX-T0232

Quic Http3 Nil Pointer Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: Quic Http3 Nil Pointer Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0233

PropertyValue
property ID: NRDAX
value: NRDAX-T0233

QUIC Invalid Length Field Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: QUIC Invalid Length Field Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0234

PropertyValue
property ID: NRDAX
value: NRDAX-T0234

QUIC Malformed Packet Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
  value: solana
date created: 2020-01-01
description: QUIC Malformed Packet Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0235

PropertyValue
property ID: NRDAX
value: NRDAX-T0235

Quic Packet Loss Calculation Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: Quic Packet Loss Calculation Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0236

PropertyValue
property ID: NRDAX
value: NRDAX-T0236

QUIC Packet Processing Infinite Loop
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: QUIC Packet Processing Infinite Loop
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0237

PropertyValue
property ID: NRDAX
value: NRDAX-T0237

QUIC Path Challenge Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2023-01-01
description: QUIC Path Challenge Flood
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0238

PropertyValue
property ID: NRDAX
value: NRDAX-T0238

QUIC Path Probe Nil-Pointer Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
  value: quic
date created: 2025-01-01
description: QUIC Path Probe Nil-Pointer Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0239

PropertyValue
property ID: NRDAX
value: NRDAX-T0239

QUIC Post-Close Packet Processing Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: QUIC Post-Close Packet Processing Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0240

PropertyValue
property ID: NRDAX
value: NRDAX-T0240

QUIC PTO Timer Overflow Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
  value: quic
date created: 2020-01-01
description: QUIC PTO Timer Overflow Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0241

PropertyValue
property ID: NRDAX
value: NRDAX-T0241

QUIC Socket Queue Spin CPU Burn
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: QUIC Socket Queue Spin CPU Burn
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0242

PropertyValue
property ID: NRDAX
value: NRDAX-T0242

Quic Transport Parameter Overflow Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: Quic Transport Parameter Overflow Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0243

PropertyValue
property ID: NRDAX
value: NRDAX-T0243

QUIC Unauthenticated Close Frame Disruption
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: quic
date created: 2020-01-01
description: QUIC Unauthenticated Close Frame Disruption
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0244

PropertyValue
property ID: NRDAX
value: NRDAX-T0244

QUIC Varint Parsing Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
  value: quic
date created: 2026-01-01
description: QUIC Varint Parsing Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0245

PropertyValue
property ID: NRDAX
value: NRDAX-T0245

Rate-Limit Key Confusion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ic
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-09
description: IC ingress-pool per-NodeId quota mis-key (IC_N1_INGRESS_POOL_QUOTA_MISKEY): every HTTP-arriving ingress message buckets under the carrier replica's own NodeId instead of the signing principal (call.rs
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0246

PropertyValue
property ID: NRDAX
value: NRDAX-T0246

Recursive Callback Stack Overflow Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
  value: polkadot
date created: 2020-01-01
description: Recursive Callback Stack Overflow Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0247

PropertyValue
property ID: NRDAX
value: NRDAX-T0247

Recursive Filter Expression CPU Blowup
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: subscription_cpu_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: iota
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-03
description: IOTA_S1_EVENTFILTER_EXPONENTIAL: iotax_subscribeEvent depth-D balanced Or-tree filter → exponential CPU
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0248

PropertyValue
property ID: NRDAX
value: NRDAX-T0248

Recursive Message Deserialisation Stack Overflow
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
  value: sui
additional property: instanceCount
  type: PropertyValue
  value: 2
additional property: knownChains
  type: PropertyValue
  value: tron
date created: 2026-07-01
description: GHSA-8wcc-m6j2-qxvm (ASA-2024-0012/0013): deeply-nested protobuf Any → TxDecoder/UnpackAny stack-overflow / exponential CPU+mem in CheckTx (pre-validation)
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0249

PropertyValue
property ID: NRDAX
value: NRDAX-T0249

Regex Schema Validation ReDoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2025-01-01
description: Regex Schema Validation ReDoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0250

PropertyValue
property ID: NRDAX
value: NRDAX-T0250

Reorg Batch Size Overflow Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Reorg Batch Size Overflow Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0251

PropertyValue
property ID: NRDAX
value: NRDAX-T0251

Reorg-Triggered Block Request Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2020-01-01
description: Reorg-Triggered Block Request Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0252

PropertyValue
property ID: NRDAX
value: NRDAX-T0252

Reorg Unfiltered Tx Crash Loop
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Reorg Unfiltered Tx Crash Loop
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0253

PropertyValue
property ID: NRDAX
value: NRDAX-T0253

Repair Protocol Legacy Request Stall
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: solana
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-09
description: Solana repair-protocol orphan DoS (solana-labs/solana v1.1.16, PR #10290): a legacy no-nonce RepairProtocol::Orphan(ContactInfo, slot) request for a slot > UNLOCK_NONCE_SLOT makes the serving node's s
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0254

PropertyValue
property ID: NRDAX
value: NRDAX-T0254

Transaction Replay Auth Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: ethereum
  value: stellar
date created: 2021-01-01
description: Transaction Replay Auth Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0255

PropertyValue
property ID: NRDAX
value: NRDAX-T0255

Replay Status Handling Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: fantom
date created: 2020-01-01
description: Replay Status Handling Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0256

PropertyValue
property ID: NRDAX
value: NRDAX-T0256

Rogue-Key Aggregate Signature Forgery
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: nimiq
date created: 2026-01-01
description: Rogue-Key Aggregate Signature Forgery
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0257

PropertyValue
property ID: NRDAX
value: NRDAX-T0257

RPC Arbitrary File Write
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: incus
date created: 2021-01-01
description: RPC Arbitrary File Write
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0258

PropertyValue
property ID: NRDAX
value: NRDAX-T0258

RPC Integer Overflow Memory Corruption
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
  value: tron
date created: 2020-01-01
description: RPC Integer Overflow Memory Corruption
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0259

PropertyValue
property ID: NRDAX
value: NRDAX-T0259

RPC Parameter Validation Defect
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: conflux
  value: cosmos
  value: ethereum
  value: filecoin
  value: solana
  value: tron
  value: xrp
date created: 2018-01-01
description: RPC Parameter Validation Defect
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0260

PropertyValue
property ID: NRDAX
value: NRDAX-T0260

RPC Request Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
  value: solana
  value: sui
additional property: instanceCount
  type: PropertyValue
  value: 3
date created: 2026-06-30
description: eth RPC request-flood (full-tx block fetch sustained at high rate)
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0261

PropertyValue
property ID: NRDAX
value: NRDAX-T0261

RPC Request Memory Leak
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: near
  value: ton
date created: 2020-01-01
description: RPC Request Memory Leak
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0262

PropertyValue
property ID: NRDAX
value: NRDAX-T0262

RPC Serialization Deadlock
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2023-01-01
description: RPC Serialization Deadlock
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0263

PropertyValue
property ID: NRDAX
value: NRDAX-T0263

Scope Permission Bypass Unauthorized Write
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: mcp
date created: 2026-01-01
description: Scope Permission Bypass Unauthorized Write
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0264

PropertyValue
property ID: NRDAX
value: NRDAX-T0264

Secret Key Validation Missing
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
date created: 2020-01-01
description: Secret Key Validation Missing
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0265

PropertyValue
property ID: NRDAX
value: NRDAX-T0265

Shred Replay Processing DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Shred Replay Processing DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0266

PropertyValue
property ID: NRDAX
value: NRDAX-T0266

Signature Malleability Consensus Manipulation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: filecoin
date created: 2021-01-01
description: Signature Malleability Consensus Manipulation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0267

PropertyValue
property ID: NRDAX
value: NRDAX-T0267

Signature Recovery CPU Burn
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: tron
date created: 2020-01-01
description: Signature Recovery CPU Burn
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0268

PropertyValue
property ID: NRDAX
value: NRDAX-T0268

Signature Verification Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: libp2p
  value: multiple
date created: 2019-01-01
description: Signature Verification Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0269

PropertyValue
property ID: NRDAX
value: NRDAX-T0269

Signature Verification OOB Read
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Signature Verification OOB Read
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0270

PropertyValue
property ID: NRDAX
value: NRDAX-T0270

Signer Double-Sign Prevention Gap
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: fantom
date created: 2020-01-01
description: Signer Double-Sign Prevention Gap
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0271

PropertyValue
property ID: NRDAX
value: NRDAX-T0271

Signer Index Overflow Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: filecoin
date created: 2025-01-01
description: Signer Index Overflow Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0272

PropertyValue
property ID: NRDAX
value: NRDAX-T0272

Signer Mismatch Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: bridge
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Signer Mismatch Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0273

PropertyValue
property ID: NRDAX
value: NRDAX-T0273

Sigop Undercount Consensus Split
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2026-01-01
description: Sigop Undercount Consensus Split
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0274

PropertyValue
property ID: NRDAX
value: NRDAX-T0274

Single-Peer Block-Discovery Stall
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
  value: zcash
additional property: instanceCount
  type: PropertyValue
  value: 2
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: zcash
date created: 2024-01-01
description: CVE-2024-52922: cmpctblock announce then stall (never answer getblocktxn) → ~10min delayed propagation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0275

PropertyValue
property ID: NRDAX
value: NRDAX-T0275

Slashing Implementation Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: near
date created: 2020-01-01
description: Slashing Implementation Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0276

PropertyValue
property ID: NRDAX
value: NRDAX-T0276

Snapshot Chunk Oversized OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
  value: solana
date created: 2020-01-01
description: Snapshot Chunk Oversized OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0277

PropertyValue
property ID: NRDAX
value: NRDAX-T0277

Snapshot File Parsing Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Snapshot File Parsing Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0278

PropertyValue
property ID: NRDAX
value: NRDAX-T0278

SOCKS Proxy Remote Code Execution
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2017-01-01
description: SOCKS Proxy Remote Code Execution
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0279

PropertyValue
property ID: NRDAX
value: NRDAX-T0279

Spoofed Endpoint-Proof Bypass Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-11
description: discv4 FINDNODE->NEIGHBORS reflection/amplification (NethermindEth/nethermind#12211): discv4 is Ethereum's connectionless-UDP node-discovery protocol. A ~170 B FINDNODE (packet-type 0x03) makes the no
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0280

PropertyValue
property ID: NRDAX
value: NRDAX-T0280

SSH Password Authentication Exposure
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
date created: 2020-01-01
description: SSH Password Authentication Exposure
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0281

PropertyValue
property ID: NRDAX
value: NRDAX-T0281

Staking Slashing Evasion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Staking Slashing Evasion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0282

PropertyValue
property ID: NRDAX
value: NRDAX-T0282

Stale State Reuse Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2020-01-01
description: Stale State Reuse Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0283

PropertyValue
property ID: NRDAX
value: NRDAX-T0283

State Archive Restore Corruption Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: stellar
date created: 2020-01-01
description: State Archive Restore Corruption Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0284

PropertyValue
property ID: NRDAX
value: NRDAX-T0284

State Channel Logic Flaw
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cardano
date created: 2023-01-01
description: State Channel Logic Flaw
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0285

PropertyValue
property ID: NRDAX
value: NRDAX-T0285

State Channel Replay Attack
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cardano
date created: 2023-01-01
description: State Channel Replay Attack
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0286

PropertyValue
property ID: NRDAX
value: NRDAX-T0286

State Simulation Copy Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: State Simulation Copy Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0287

PropertyValue
property ID: NRDAX
value: NRDAX-T0287

State Sync Proposer Priority Mismatch Chain Split
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: State Sync Proposer Priority Mismatch Chain Split
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0288

PropertyValue
property ID: NRDAX
value: NRDAX-T0288

Stream Abort Race Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
  value: quic
date created: 2020-01-01
description: Stream Abort Race Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0289

PropertyValue
property ID: NRDAX
value: NRDAX-T0289

Subscription Failure Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: filecoin
date created: 2020-01-01
description: Subscription Failure Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0290

PropertyValue
property ID: NRDAX
value: NRDAX-T0290

Subscription Permit Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
  value: sui
additional property: instanceCount
  type: PropertyValue
  value: 3
date created: 2026-07-03
description: C04 (COSMOS_SUBSCRIBE_PERCONN_CAP): CometBFT rpc/core/events.go:27 caps NumClients>=MaxSubscriptionClients(100) but clientID=RemoteAddr(ip:PORT) → each TCP conn gets an independent per-client cap → su
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0291

PropertyValue
property ID: NRDAX
value: NRDAX-T0291

Sync Height Manipulation Stall
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-09
description: CVE-2025-24371 (ASA-2025-001 / GHSA-22qq-3xwm-r5x4): a malicious CometBFT blocksync peer disrupts a node's ability to sync. In blocksync a peer reports its base/latest heights in a StatusResponse; the
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0292

PropertyValue
property ID: NRDAX
value: NRDAX-T0292

Sync Request Loop OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
  value: ethereum
  value: solana
date created: 2020-01-01
description: Sync Request Loop OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0293

PropertyValue
property ID: NRDAX
value: NRDAX-T0293

Sync State Deadlock Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Sync State Deadlock Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0294

PropertyValue
property ID: NRDAX
value: NRDAX-T0294

Sync-State Poisoning Via Fake Blocks
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: gossip_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: zcash
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: cosmos
  value: near
  value: zcash
date created: 2024-01-01
description: CVE-2026-52737 (GHSA-gvjc-3w7c-92jx): a single unauthenticated Zcash P2P peer answers the syncing node's getblocks/FindBlocks with a two-hash inv, then serves a `block` whose coinbase height is above
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0295

PropertyValue
property ID: NRDAX
value: NRDAX-T0295

Template Injection RCE
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2022-01-01
description: Template Injection RCE
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0296

PropertyValue
property ID: NRDAX
value: NRDAX-T0296

Timejacking Via Version Message
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2020-01-01
description: Timejacking Via Version Message
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0297

PropertyValue
property ID: NRDAX
value: NRDAX-T0297

Timestamp Integer Overflow Netsplit
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2024-01-01
description: CVE-2024-52912: version nTime=INT64_MIN → abs64 overflow skews adjusted-network-time → netsplit
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0298

PropertyValue
property ID: NRDAX
value: NRDAX-T0298

Timestamp Validation Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
date created: 2020-01-01
description: Timestamp Validation Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0299

PropertyValue
property ID: NRDAX
value: NRDAX-T0299

Timing Side-Channel Deanonymization
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2020-01-01
description: Timing Side-Channel Deanonymization
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0300

PropertyValue
property ID: NRDAX
value: NRDAX-T0300

TLS Certificate Parsing Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2025-01-01
description: TLS Certificate Parsing Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0301

PropertyValue
property ID: NRDAX
value: NRDAX-T0301

TLS Handshake Fragmentation Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: TLS Handshake Fragmentation Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0302

PropertyValue
property ID: NRDAX
value: NRDAX-T0302

TLS Handshake MITM Injection
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: litecoin
date created: 2014-01-01
description: TLS Handshake MITM Injection
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0303

PropertyValue
property ID: NRDAX
value: NRDAX-T0303

TLS Renegotiation Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: xrp
date created: 2021-01-01
description: TLS Renegotiation Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0304

PropertyValue
property ID: NRDAX
value: NRDAX-T0304

TLS SNI mTLS Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: traefik
date created: 2026-01-01
description: TLS SNI mTLS Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0305

PropertyValue
property ID: NRDAX
value: NRDAX-T0305

Token Supply Inflation Bug
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2024-01-01
description: Token Supply Inflation Bug
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0306

PropertyValue
property ID: NRDAX
value: NRDAX-T0306

Transaction Malleability
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-09
description: Transaction Malleability (SlowMist Blockchain Common Vulnerability List): a tx and a malleated sibling with a byte-different scriptSig (extra OP_NOP) → different txid, identical inputs/outputs/effect;
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0307

PropertyValue
property ID: NRDAX
value: NRDAX-T0307

Transaction History Storage Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Transaction History Storage Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0308

PropertyValue
property ID: NRDAX
value: NRDAX-T0308

Tx History Storage Flood Disk Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Tx History Storage Flood Disk Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0309

PropertyValue
property ID: NRDAX
value: NRDAX-T0309

Tx Malleability Non-Consensus
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2020-01-01
description: Tx Malleability Non-Consensus
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0310

PropertyValue
property ID: NRDAX
value: NRDAX-T0310

Transaction Relay Suppression
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2024-01-01
description: Transaction Relay Suppression
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0311

PropertyValue
property ID: NRDAX
value: NRDAX-T0311

Tx-Relay Throughput Jamming
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: gossip_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-01
description: CVE-2024-55563 (Bitcoin Core <= 27.2): transaction-relay jamming via an off-chain protocol attack ('Transaction-Relay Throughput Overflow Attacks against Off-Chain Protocols'; related to CVE-2024-5291
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0312

PropertyValue
property ID: NRDAX
value: NRDAX-T0312

Transaction Validation Logic Consensus Split
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: cosmos
  value: ethereum
  value: zcash
date created: 2024-01-01
description: Transaction Validation Logic Consensus Split
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0313

PropertyValue
property ID: NRDAX
value: NRDAX-T0313

TxPool Crafted Transaction Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
  value: solana
date created: 2020-01-01
description: TxPool Crafted Transaction Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0314

PropertyValue
property ID: NRDAX
value: NRDAX-T0314

TxPool Message Flood OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
date created: 2020-01-01
description: TxPool Message Flood OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0315

PropertyValue
property ID: NRDAX
value: NRDAX-T0315

Unaligned Memory Access Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: monero
date created: 2020-01-01
description: Unaligned Memory Access Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0316

PropertyValue
property ID: NRDAX
value: NRDAX-T0316

Unauthenticated Admin Interface Exposure
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: auth_bypass
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: ethereum
  value: sui
additional property: instanceCount
  type: PropertyValue
  value: 2
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: ethereum
date created: 2018-01-01
description: Black Valentine (SlowMist Blockchain Common Vulnerability List): geth --http with the personal namespace exposed + an unlocked/unlockable account → remote unauthenticated personal_unlockAccount then e
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0317

PropertyValue
property ID: NRDAX
value: NRDAX-T0317

Unauthenticated RPC Command Execution
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: npm
date created: 2026-01-01
description: Unauthenticated RPC Command Execution
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0318

PropertyValue
property ID: NRDAX
value: NRDAX-T0318

Unbounded Alert Map OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2016-01-01
description: Unbounded Alert Map OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0319

PropertyValue
property ID: NRDAX
value: NRDAX-T0319

Unbounded Connection Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cosmos
  value: ethereum
  value: libp2p
  value: monero
  value: quic
  value: solana
additional property: instanceCount
  type: PropertyValue
  value: 6
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: solana
date created: 2020-01-01
description: CVE-2020-5303 (Lavender): unlimited CometBFT P2P connection requests → OOM + activeIDs-map saturation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0320

PropertyValue
property ID: NRDAX
value: NRDAX-T0320

Unbounded Connection ID Storage
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-10
description: quic-go connection-ID memory exhaustion (CVE-2024-22189, GHSA-c33x-xqrf-c478): on an established QUIC connection the attacker floods NEW_CONNECTION_ID frames (type 0x18) with an escalating 'Retire Pri
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0321

PropertyValue
property ID: NRDAX
value: NRDAX-T0321

Unbounded Deserialisation OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bsc
  value: cosmos
  value: ethereum
  value: monero
  value: near
  value: sui
  value: zcash
date created: 2026-01-01
description: Unbounded Deserialisation OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0322

PropertyValue
property ID: NRDAX
value: NRDAX-T0322

Unbounded Filter Subscription Storage Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: fantom
date created: 2020-01-01
description: Unbounded Filter Subscription Storage Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0323

PropertyValue
property ID: NRDAX
value: NRDAX-T0323

Unbounded Log Range Scan Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: fantom
date created: 2020-01-01
description: Unbounded Log Range Scan Amplification
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0324

PropertyValue
property ID: NRDAX
value: NRDAX-T0324

Unbounded Message Loop Halt
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Unbounded Message Loop Halt
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0325

PropertyValue
property ID: NRDAX
value: NRDAX-T0325

Unbounded Peer-Slot Sybil
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: gossip_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
  value: ethereum
additional property: instanceCount
  type: PropertyValue
  value: 2
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2026-07-09
description: Sybil (SlowMist Blockchain Common Vulnerability List): a flood of full RLPx+eth-handshake peers each with a DISTINCT node identity occupies the target's inbound peer slots and biases peer selection (e
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0326

PropertyValue
property ID: NRDAX
value: NRDAX-T0326

Unbounded Registration Storage Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: libp2p
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-10
description: CVE-2026-35457 (GHSA-v5hw-cv9c-rpg7): libp2p-rendezvous server stores DISCOVER pagination cookies in an unbounded in-memory map (Registrations::cookies) with no size cap / eviction / expiry — a flood
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0327

PropertyValue
property ID: NRDAX
value: NRDAX-T0327

Unbounded Request Body Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: cardano
  value: ethereum
  value: ic
additional property: instanceCount
  type: PropertyValue
  value: 6
additional property: knownChains
  type: PropertyValue
  value: monero
  value: tron
date created: 2026-07-07
description: PRYSM_ATTESTER_SLASHING_PUBKEY_BURN (S4): POST /eth/v1/beacon/pool/attester_slashings_v2 decodes one AttesterSlashingElectra whose attesting_indices vector is capped only at the structural MaxValidato
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0328

PropertyValue
property ID: NRDAX
value: NRDAX-T0328

Unbounded RPC Response Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: response_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: aptos
  value: ethereum
  value: iota
  value: solana
  value: sui
  value: xrp
  value: zcash
additional property: instanceCount
  type: PropertyValue
  value: 15
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
  value: monero
date created: 2025-01-01
description: The node's JSON-RPC handler for batched account-lookup calls (e.g. getMultipleAccounts) imposes no response-size accounting or cost weighting relative to request size, only a flat cap on key count. An attacker submits a small request (~4.8KB) listing well-known large program accounts (Token/BPFLoader2/BPFLoaderUpgradeable), whose ELF/program data stubs are echoed in full, driving a single request to a ~17.8MB response (3,708x amplification) and sustained ~830MB/s egress under parallel workers. The fix-class is response-size-aware rate limiting/cost accounting on batched read RPCs (weighting by bytes returned, not just item count), not a request-count cap.
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0329

PropertyValue
property ID: NRDAX
value: NRDAX-T0329

Unbounded Signature Verification CPU Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: tron
date created: 2020-01-01
description: Unbounded Signature Verification CPU Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0330

PropertyValue
property ID: NRDAX
value: NRDAX-T0330

Unbounded Stream Backpressure OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: libp2p
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-01
description: CVE-2022-23492/CVE-2022-23486: libp2p stream/connection exhaustion (no backpressure) → OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0331

PropertyValue
property ID: NRDAX
value: NRDAX-T0331

Unbounded Stream Resource Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 1
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: libp2p
  value: near
  value: quic
date created: 2022-01-01
description: Unbounded Stream Resource Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0332

PropertyValue
property ID: NRDAX
value: NRDAX-T0332

Unbounded Subscription Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: connection_exhaustion
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: iota
  value: libp2p
additional property: instanceCount
  type: PropertyValue
  value: 2
additional property: knownChains
  type: PropertyValue
  value: ethereum
  value: libp2p
date created: 2026-01-01
description: NullRabbit source-traced IOTA GraphQL unbounded-subscription flood (operator-gated).
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0333

PropertyValue
property ID: NRDAX
value: NRDAX-T0333

Unbounded Task Spawn Resource Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: Unbounded Task Spawn Resource Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0334

PropertyValue
property ID: NRDAX
value: NRDAX-T0334

Unchecked Inherent Manipulation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: polkadot
date created: 2025-01-01
description: Unchecked Inherent Manipulation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0335

PropertyValue
property ID: NRDAX
value: NRDAX-T0335

Unchecked Memory Write Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
  value: stellar
date created: 2020-01-01
description: Unchecked Memory Write Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0336

PropertyValue
property ID: NRDAX
value: NRDAX-T0336

Unexploitable Dependency Vulnerability
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: aptos
  value: avalanche
  value: bitcoin
  value: bsc
  value: cardano
  value: conflux
  value: cosmos
  value: dogecoin
  value: ethereum
  value: ethereum_l2
  value: filecoin
  value: monero
  value: none
  value: quic
  value: solana
  value: sui
  value: tron
  value: wasm
  value: xrp
date created: 2018-01-01
description: Unexploitable Dependency Vulnerability
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0337

PropertyValue
property ID: NRDAX
value: NRDAX-T0337

Unhandled Enum Variant Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: conflux
date created: 2020-01-01
description: Unhandled Enum Variant Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0338

PropertyValue
property ID: NRDAX
value: NRDAX-T0338

Unhandled Fork Event Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: near
  value: solana
date created: 2020-01-01
description: Unhandled Fork Event Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0339

PropertyValue
property ID: NRDAX
value: NRDAX-T0339

Unhandled Promise Rejection Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: Unhandled Promise Rejection Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0340

PropertyValue
property ID: NRDAX
value: NRDAX-T0340

Unhandled RPC Error Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: algorand
  value: conflux
  value: ethereum
  value: ethereum_l2
  value: polkadot
  value: solana
  value: sui
  value: xrp
date created: 2020-01-01
description: Unhandled RPC Error Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0341

PropertyValue
property ID: NRDAX
value: NRDAX-T0341

Unindexed Account Scan CPU Amplification
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: solana
  value: sui
additional property: instanceCount
  type: PropertyValue
  value: 3
date created: 2026-06-30
description: E28/SOL_P07: getProgramAccounts filter-miss CPU scan (agave rpc.rs:2235-2251)
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0342

PropertyValue
property ID: NRDAX
value: NRDAX-T0342

Uninitialized Buffer Memory Disclosure
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ssb
date created: 2021-01-01
description: Uninitialized Buffer Memory Disclosure
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0343

PropertyValue
property ID: NRDAX
value: NRDAX-T0343

Uninitialized Memory Disclosure
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
  value: unknown
date created: 2020-01-01
description: Uninitialized Memory Disclosure
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0344

PropertyValue
property ID: NRDAX
value: NRDAX-T0344

Unrated GetHeaders Response Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: response_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: litecoin
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-01
description: CVE-2023-33297 (drain): un-rate-limited getheaders flood → >100MB/s upload (Bitcoin/Litecoin/Dogecoin)
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0345

PropertyValue
property ID: NRDAX
value: NRDAX-T0345

Unresolvable Finalized Block Wedge
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2020-01-01
description: Unresolvable Finalized Block Wedge
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0346

PropertyValue
property ID: NRDAX
value: NRDAX-T0346

Unsafe Deserialization Memory Corruption
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: monero
date created: 2018-01-01
description: Unsafe Deserialization Memory Corruption
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0347

PropertyValue
property ID: NRDAX
value: NRDAX-T0347

Unsafe Deserialization RCE
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
  value: near
date created: 2022-01-01
description: Unsafe Deserialization RCE
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0348

PropertyValue
property ID: NRDAX
value: NRDAX-T0348

Unseeded Hash Collision DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-11
description: QUIC SCID hash-collision DoS (CVE-2025-47200): a flood of QUIC v1 Initial packets whose 8-byte Source Connection IDs are crafted to COLLIDE in the server's connection-ID hash table. The server keys ac
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0349

PropertyValue
property ID: NRDAX
value: NRDAX-T0349

Unsolicited Block State Poisoning
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
  value: cosmos
additional property: instanceCount
  type: PropertyValue
  value: 2
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2026-07-01
description: CVE-2024-52921: unrequested merkle-mismatched block erases other peers' download state → hinders propagation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0350

PropertyValue
property ID: NRDAX
value: NRDAX-T0350

Unvalidated DHT Record Storage Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: libp2p
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-10
description: CVE-2026-45783 / GHSA-32mq-hpph-xfvr: the libp2p Kademlia DHT (@libp2p/kad-dht (npm, js-libp2p), affected < 16.2.6) accepts and persists PUT_VALUE records with no effective validation, count, or byte
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0351

PropertyValue
property ID: NRDAX
value: NRDAX-T0351

Unvalidated Field Length Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: state_import_abuse
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: solana-agave
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-03
description: Agave snapshot AppendVec StoredMeta.data_len > MAX_PERMITTED_DATA_LENGTH (10 MiB) survives new_for_startup (sanitize skipped) -> index-gen scan_accounts QuotaExceeded -> .expect("must scan accounts st
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0352

PropertyValue
property ID: NRDAX
value: NRDAX-T0352

Unvalidated Header Buffer OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-01-01
description: CVE-2024-52916: difficulty-1 headers with parent=genesis → mapBlockIndex unbounded growth → memory DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0353

PropertyValue
property ID: NRDAX
value: NRDAX-T0353

Unvalidated Inventory Tracking Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-01
description: CVE-2018-17145 (INVDoS): random-hash INV flood → unbounded tx-tracking memory
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0354

PropertyValue
property ID: NRDAX
value: NRDAX-T0354

Unvalidated Relay Map Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: bitcoin
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-01
description: CVE-2016-10724: pre-0.13.0 alert messages stored in an unbounded map → memory exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0355

PropertyValue
property ID: NRDAX
value: NRDAX-T0355

UPnP Gateway Event Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: UPnP Gateway Event Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0356

PropertyValue
property ID: NRDAX
value: NRDAX-T0356

UPnP Response Buffer Overflow
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: supply-chain
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
date created: 2015-01-01
description: UPnP Response Buffer Overflow
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0357

PropertyValue
property ID: NRDAX
value: NRDAX-T0357

URL Path Encoding Auth Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
date created: 2026-01-01
description: URL Path Encoding Auth Bypass
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0358

PropertyValue
property ID: NRDAX
value: NRDAX-T0358

Verbose Logging Triggered Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum
date created: 2022-01-01
description: Verbose Logging Triggered Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0359

PropertyValue
property ID: NRDAX
value: NRDAX-T0359

Vesting Account Creation Front-Running
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: governance
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Vesting Account Creation Front-Running
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0360

PropertyValue
property ID: NRDAX
value: NRDAX-T0360

Vesting Logic Exploit
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: economic-defi
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: evmos
date created: 2024-01-01
description: Vesting Logic Exploit
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0361

PropertyValue
property ID: NRDAX
value: NRDAX-T0361

VM Integer Overflow Memory Corruption
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2021-01-01
description: VM Integer Overflow Memory Corruption
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0362

PropertyValue
property ID: NRDAX
value: NRDAX-T0362

VM Resource Exhaustion OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: aptos
  value: cosmos
  value: hedera
date created: 2020-01-01
description: VM Resource Exhaustion OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0363

PropertyValue
property ID: NRDAX
value: NRDAX-T0363

VM Stack Overflow Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
  value: ethereum_l2
date created: 2020-01-01
description: VM Stack Overflow Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0364

PropertyValue
property ID: NRDAX
value: NRDAX-T0364

VM Stack Underflow Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: ledger-tx
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bsc
date created: 2020-01-01
description: VM Stack Underflow Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0365

PropertyValue
property ID: NRDAX
value: NRDAX-T0365

Vote Extension Power Mutation
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2020-01-01
description: Vote Extension Power Mutation
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0366

PropertyValue
property ID: NRDAX
value: NRDAX-T0366

Vote Extension Validation Panic
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: cosmos
date created: 2024-01-01
description: Vote Extension Validation Panic
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0367

PropertyValue
property ID: NRDAX
value: NRDAX-T0367

Vote Signature Late Verification Resource Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: consensus
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Vote Signature Late Verification Resource Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0368

PropertyValue
property ID: NRDAX
value: NRDAX-T0368

WebSocket Task Spawn Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: sui
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-08
description: NullRabbit source-traced H4 slow-read
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0369

PropertyValue
property ID: NRDAX
value: NRDAX-T0369

WebTransport Capsule Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2026-01-01
description: WebTransport Capsule Memory Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0370

PropertyValue
property ID: NRDAX
value: NRDAX-T0370

WebTransport Close Handler Deadlock
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2026-01-01
description: WebTransport Close Handler Deadlock
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0371

PropertyValue
property ID: NRDAX
value: NRDAX-T0371

WebTransport Message Parsing Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2020-01-01
description: WebTransport Message Parsing Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0372

PropertyValue
property ID: NRDAX
value: NRDAX-T0372

WebTransport Stream Map Leak OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: libp2p
date created: 2026-01-01
description: WebTransport Stream Map Leak OOM
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0373

PropertyValue
property ID: NRDAX
value: NRDAX-T0373

Witness Block Parsing DoS
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: bitcoin
  value: near
date created: 2022-01-01
description: Witness Block Parsing DoS
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0374

PropertyValue
property ID: NRDAX
value: NRDAX-T0374

XML Attribute Parsing Quadratic CPU Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: any
date created: 2020-01-01
description: XML Attribute Parsing Quadratic CPU Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0375

PropertyValue
property ID: NRDAX
value: NRDAX-T0375

XML Namespace Declaration Memory Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: any
date created: 2020-01-01
description: XML Namespace Declaration Memory Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0376

PropertyValue
property ID: NRDAX
value: NRDAX-T0376

Zero-Length Field Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: solana
date created: 2020-01-01
description: Zero-Length Field Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0377

PropertyValue
property ID: NRDAX
value: NRDAX-T0377

ZK Proof Forgery Acceptance
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2019-01-01
description: ZK Proof Forgery Acceptance
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0378

PropertyValue
property ID: NRDAX
value: NRDAX-T0378

ZK Verifier Panic Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: ethereum_l2
date created: 2020-01-01
description: ZK Verifier Panic Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0379

PropertyValue
property ID: NRDAX
value: NRDAX-T0379

zkVM Guest Memory Safety
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: crypto
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: risc0
date created: 2025-01-01
description: zkVM Guest Memory Safety
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0380

PropertyValue
property ID: NRDAX
value: NRDAX-T0380

ZMQ Message Error-Handling Crash
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-rpc
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: monero
date created: 2020-01-01
description: ZMQ Message Error-Handling Crash
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0381

PropertyValue
property ID: NRDAX
value: NRDAX-T0381

Error-Response Connection-State Leak
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: quic
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-13
description: dnsdist's DoQ/DoH3 receiver allocates per-error bookkeeping state whenever it emits a self-generated FORMERR/REFUSED/SERVFAIL/NOTIMP response, and attaches that state to the QUIC connection object rather than the completed stream/query, freeing it only on full connection teardown. An attacker opens a single DoQ/DoH3 connection and streams a large run of complete, well-formed queries engineered to each trigger a local error response, causing the per-error allocations to accumulate unboundedly for as long as the connection (or its parallel siblings) stays open. The fix-class is scoping/freeing per-error bookkeeping to the query/stream lifetime instead of the connection lifetime, bounding memory growth regardless of connection duration.
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0382

PropertyValue
property ID: NRDAX
value: NRDAX-T0382

HPACK Decoded-Size Accounting Bypass
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: http2
additional property: instanceCount
  type: PropertyValue
  value: 2
date created: 2026-07-13
description: Envoy's HTTP/2 HPACK decoder bounds header-block size on ENCODED bytes only, and cookie header bytes bypass the max_request_headers_kb decoded-size accounting entirely. An attacker plants one large cookie value once in the HPACK dynamic table via a literal-with-incremental-indexing field, then re-references that single entry many times per request using 1-byte indexed-header-field octets, so the wire stays tiny while Envoy materializes the full cookie value on every reference. The fix-class is bounding/accounting the DECODED header size (including cookie bytes) rather than just the encoded HPACK block, closing the asymmetric-allocation gap; without it, a few connections/streams balloon decoded-header memory past the process limit and get OOM-killed within seconds.
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0383

PropertyValue
property ID: NRDAX
value: NRDAX-T0383

HTTP/2 Continuation Frame Flood
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: compute_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: http2
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-13
description: The HTTP/2 decoder's header-list-size guard is size-based (maxHeaderListSize - frameSize < currentSize) and never trips when each CONTINUATION frame carries zero bytes, so no count limit exists on CONTINUATION frames following an unterminated HEADERS block (END_HEADERS=0). An attacker opens a header block and streams an unbounded sequence of zero-length CONTINUATION frames on one connection, each costing only a 9-byte frame header to send. The decoder keeps parsing every frame, monopolizing a CPU thread and producing a compute-exhaustion DoS at negligible attacker bandwidth.
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0384

PropertyValue
property ID: NRDAX
value: NRDAX-T0384

Invalid Block Disk Replay Exhaustion
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: network-p2p
additional property: status
  type: PropertyValue
  value: active
additional property: chains
additional property: instanceCount
  type: PropertyValue
  value: 0
additional property: knownChains
  type: PropertyValue
  value: zcash
date created: 2020-01-01
description: Invalid Block Disk Replay Exhaustion
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0385

PropertyValue
property ID: NRDAX
value: NRDAX-T0385

Priority-Field Parse-Exception Leak
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: http2
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-13
description: The HTTP/2 priority parser (RFC 9218 urgency field) throws an unhandled IllegalArgumentException when given an out-of-range value (e.g. u=99), and the request-handling code path lacks a catch/cleanup for this failure, leaving the half-processed request's state permanently retained. An attacker floods the server with malformed PRIORITY_UPDATE frames or priority headers, each triggering the same uncaught-exception path, causing unbounded cumulative memory retention across requests. Effect: gradual heap growth culminating in OutOfMemoryError / DoS. The fix-class is 'catch parser exceptions and ensure per-request cleanup/dispatch on all error paths', distinguishing it from stream-count or flow-control exhaustion techniques.
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0386

PropertyValue
property ID: NRDAX
value: NRDAX-T0386

QPACK Blocked-Decode Flow-Control Leak
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: http3
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-13
description: The QPACK decoder returns QUIC stream- and connection-level flow-control credit for HEADERS bytes belonging to field sections that reference dynamic-table entries not yet inserted (Required Insert Count > inserted count), even though those bytes remain resident in the decoder's blocked-section heap buffer. An attacker sends such blocked field sections and never supplies the corresponding encoder-stream inserts, so the sections never decode or free, while continuing to send more HEADERS traffic using the wrongly-returned flow-control credit. This decouples flow-control accounting from actual buffer occupancy, letting the attacker drive unbounded heap growth in the decoder and exhaust memory/DoS the HTTP/3 stack.
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0387

PropertyValue
property ID: NRDAX
value: NRDAX-T0387

Unbounded Header-List-Size Default OOM
type: DefinedTerm
additional property: family
  type: PropertyValue
  value: memory_amp
additional property: status
  type: PropertyValue
  value: active
additional property: chains
  type: PropertyValue
  value: http3
additional property: instanceCount
  type: PropertyValue
  value: 1
date created: 2026-07-13
description: The node-side defect is an insecure default: the HTTP/3 codec's maxHeaderListSize defaults to the near-unbounded RFC 9114 ceiling ((1<<62)-1) whenever a peer omits SETTINGS_MAX_FIELD_SECTION_SIZE, instead of inheriting the safe bounded default already enforced for HTTP/1.1 and HTTP/2. An attacker simply never sends that setting, then transmits a HEADERS/QPACK block containing an enormous COUNT of distinct literal header fields; the codec keeps decoding and buffering each field with no size ceiling. The fix-class is enforcing a safe bounded default (and/or hard cap independent of peer-advertised settings) for field-section size in the HTTP/3 codec, which measurably manifests as unbounded heap growth culminating in OutOfMemoryError/process death.
language: en
is part of: NRDAX - decentralised infrastructure attack registry
term code: NRDAX-T0388

PropertyValue
property ID: NRDAX
value: NRDAX-T0388