Ethereum - node & validator attack techniques
25 techniques with a reproduced instance on Ethereum
NRDAX-T0006 - Async Runtime Blocking VM Execution (compute_amp) active NRDAX-T0038 - Count Underflow Header Serving Amplification (memory_amp) active NRDAX-T0041 - Cross-Chain Peer Pool Pollution (connection_exhaustion) active NRDAX-T0071 - Ethash Verification Memory Exhaustion (memory_amp) active NRDAX-T0076 - Expensive Debug RPC Compute Amplification (compute_amp) active NRDAX-T0095 - GraphQL Alias Query Amplification (memory_amp) active NRDAX-T0096 - GraphQL Nested Query Depth CPU Exhaustion () active NRDAX-T0101 - Handshake Crypto Validation Bypass Crash (fault_termination) active NRDAX-T0110 - HTTP Header Spoofing Trust Bypass () active NRDAX-T0122 - Integer Signedness Index OOB Crash (fault_termination) active NRDAX-T0148 - Malformed KZG Proof Mismatch DoS (compute_amp) active NRDAX-T0156 - Mempool Pending Eviction Flood (memory_amp) active NRDAX-T0171 - Nil Node Dereference Panic (fault_termination) active NRDAX-T0206 - Pre-Handshake Packet Flood (compute_amp) active NRDAX-T0214 - Protocol Message Flood Unbounded Goroutine (connection_exhaustion) active NRDAX-T0261 - RPC Request Flood (connection_exhaustion) active NRDAX-T0280 - Spoofed Endpoint-Proof Bypass Amplification (response_amp) active NRDAX-T0317 - Unauthenticated Admin Interface Exposure () active NRDAX-T0320 - Unbounded Connection Flood (connection_exhaustion) active NRDAX-T0323 - Unbounded Filter Subscription Storage Exhaustion () active NRDAX-T0326 - Unbounded Peer-Slot Sybil (connection_exhaustion) active NRDAX-T0328 - Unbounded Request Body Memory Exhaustion (memory_amp) active NRDAX-T0329 - Unbounded RPC Response Amplification (response_amp) active NRDAX-T0389 - Precompile Gas Underpricing CPU Burn (compute_amp) active NRDAX-T0396 - HTTP/2 Multiplexing Rate-Limit Bypass (compute_amp) active
from the CLI
List or export Ethereum techniques with the NRDAX CLI:
nrdax list --chain ethereumnrdax export --chain ethereum --format json