Cosmos - node & validator attack techniques
18 techniques with a reproduced instance on Cosmos
NRDAX-T0061 - Duplicate Tx Mempool Index Desync (memory_amp) active NRDAX-T0064 - Endpoint Concurrency Cap Exhaustion (connection_exhaustion) active NRDAX-T0122 - Integer Signedness Index OOB Crash (fault_termination) active NRDAX-T0143 - Malformed Field Gossip Before Validation (compute_amp) active NRDAX-T0165 - Missing Zero-Guard Divide-By-Zero Halt (fault_termination) active NRDAX-T0187 - Oversized Block Response Flood (memory_amp) active NRDAX-T0205 - Pre-Handshake Crypto CPU Burn (compute_amp) active NRDAX-T0207 - Pre-Verify Gossip Flood (compute_amp) active NRDAX-T0211 - Premature Processing Index-Out-Of-Range Panic (fault_termination) active NRDAX-T0249 - Recursive Message Deserialisation Stack Overflow (fault_termination) active NRDAX-T0291 - Subscription Permit Exhaustion (connection_exhaustion) active NRDAX-T0292 - Sync Height Manipulation Stall () active NRDAX-T0320 - Unbounded Connection Flood (connection_exhaustion) active NRDAX-T0342 - Unindexed Account Scan CPU Amplification (compute_amp) active NRDAX-T0350 - Unsolicited Block State Poisoning () active NRDAX-T0401 - Boundary-Check Off-By-One Index OOB Panic (fault_termination) active NRDAX-T0408 - Unbounded Address List Validation CPU Exhaustion (compute_amp) active NRDAX-T0409 - Blocked Address Validation Bypass () active
from the CLI
List or export Cosmos techniques with the NRDAX CLI:
nrdax list --chain cosmosnrdax export --chain cosmos --format json