NRDAX - the NullRabbit Decentralised Attack indeX

NRDAX-T0388 - Unbounded Header-List-Size Default OOM

2026-07-13T00:00:00Z

The node-side defect is an insecure default: the HTTP/3 codec's maxHeaderListSize defaults to the near-unbounded RFC 9114 ceiling ((1<<62)-1) whenever a peer omits SETTINGS_MAX_FIELD_SECTION_SIZE, instead of inheriting the safe bounded default already enforced for HTTP/1.1 and HTTP/2. An attacker simply never sends that setting, then transmits a HEADERS/QPACK block containing an enormous COUNT of distinct literal header fields; the codec keeps decoding and buffering each field with no size ceiling. The fix-class is enforcing a safe bounded default (and/or hard cap independent of peer-advertised settings) for field-section size in the HTTP/3 codec, which measurably manifests as unbounded heap growth culminating in OutOfMemoryError/process death.

NRDAX-T0387 - QPACK Blocked-Decode Flow-Control Leak

2026-07-13T00:00:00Z

The QPACK decoder returns QUIC stream- and connection-level flow-control credit for HEADERS bytes belonging to field sections that reference dynamic-table entries not yet inserted (Required Insert Count > inserted count), even though those bytes remain resident in the decoder's blocked-section heap buffer. An attacker sends such blocked field sections and never supplies the corresponding encoder-stream inserts, so the sections never decode or free, while continuing to send more HEADERS traffic using the wrongly-returned flow-control credit. This decouples flow-control accounting from actual buffer occupancy, letting the attacker drive unbounded heap growth in the decoder and exhaust memory/DoS the HTTP/3 stack.

NRDAX-T0386 - Priority-Field Parse-Exception Leak

2026-07-13T00:00:00Z

The HTTP/2 priority parser (RFC 9218 urgency field) throws an unhandled IllegalArgumentException when given an out-of-range value (e.g. u=99), and the request-handling code path lacks a catch/cleanup for this failure, leaving the half-processed request's state permanently retained. An attacker floods the server with malformed PRIORITY_UPDATE frames or priority headers, each triggering the same uncaught-exception path, causing unbounded cumulative memory retention across requests. Effect: gradual heap growth culminating in OutOfMemoryError / DoS. The fix-class is 'catch parser exceptions and ensure per-request cleanup/dispatch on all error paths', distinguishing it from stream-count or flow-control exhaustion techniques.

NRDAX-T0384 - HTTP/2 Continuation Frame Flood

2026-07-13T00:00:00Z

The HTTP/2 decoder's header-list-size guard is size-based (maxHeaderListSize - frameSize < currentSize) and never trips when each CONTINUATION frame carries zero bytes, so no count limit exists on CONTINUATION frames following an unterminated HEADERS block (END_HEADERS=0). An attacker opens a header block and streams an unbounded sequence of zero-length CONTINUATION frames on one connection, each costing only a 9-byte frame header to send. The decoder keeps parsing every frame, monopolizing a CPU thread and producing a compute-exhaustion DoS at negligible attacker bandwidth.

NRDAX-T0383 - HPACK Decoded-Size Accounting Bypass

2026-07-13T00:00:00Z

Envoy's HTTP/2 HPACK decoder bounds header-block size on ENCODED bytes only, and cookie header bytes bypass the max_request_headers_kb decoded-size accounting entirely. An attacker plants one large cookie value once in the HPACK dynamic table via a literal-with-incremental-indexing field, then re-references that single entry many times per request using 1-byte indexed-header-field octets, so the wire stays tiny while Envoy materializes the full cookie value on every reference. The fix-class is bounding/accounting the DECODED header size (including cookie bytes) rather than just the encoded HPACK block, closing the asymmetric-allocation gap; without it, a few connections/streams balloon decoded-header memory past the process limit and get OOM-killed within seconds.

NRDAX-T0382 - Error-Response Connection-State Leak

2026-07-13T00:00:00Z

dnsdist's DoQ/DoH3 receiver allocates per-error bookkeeping state whenever it emits a self-generated FORMERR/REFUSED/SERVFAIL/NOTIMP response, and attaches that state to the QUIC connection object rather than the completed stream/query, freeing it only on full connection teardown. An attacker opens a single DoQ/DoH3 connection and streams a large run of complete, well-formed queries engineered to each trigger a local error response, causing the per-error allocations to accumulate unboundedly for as long as the connection (or its parallel siblings) stays open. The fix-class is scoping/freeing per-error bookkeeping to the query/stream lifetime instead of the connection lifetime, bounding memory growth regardless of connection duration.

NRDAX-T0349 - Unseeded Hash Collision DoS

2026-07-11T00:00:00Z

QUIC SCID hash-collision DoS (CVE-2025-47200): a flood of QUIC v1 Initial packets whose 8-byte Source Connection IDs are crafted to COLLIDE in the server's connection-ID hash table. The server keys ac

NRDAX-T0280 - Spoofed Endpoint-Proof Bypass Amplification

2026-07-11T00:00:00Z

discv4 FINDNODE->NEIGHBORS reflection/amplification (NethermindEth/nethermind#12211): discv4 is Ethereum's connectionless-UDP node-discovery protocol. A ~170 B FINDNODE (packet-type 0x03) makes the no

NRDAX-T0225 - QUIC Control Frame Flood

2026-07-11T00:00:00Z

s2n-quic stream-limit exhaustion (GHSA-475v-pq2g-fp9g): pre-patch `RemoteInitiated::on_close_stream` directly bumped `max_streams_sync` with NO rate limiting, so every close of a remote-initiated stre

NRDAX-T0203 - Ping Flood Pending Frame OOM

2026-07-11T00:00:00Z

CVE-2024-32984 (GHSA-3999-5ffv-wp2r): rust-yamux (0.13.0 .. <0.13.2) buffers frames-to-send in an unbounded `pending_frames` VecDeque. A remote peer floods Ping frames (each enqueues a Pong reply) and

NRDAX-T0059 - Duplicate Transport Parameter Memory Leak

2026-07-11T00:00:00Z

msquic duplicate-transport-parameters VersionInfo leak (CVE-2024-26190): flood of QUIC v1 Initial packets (distinct SCID / new connection each), every Initial carrying a CRYPTO frame (type 0x06) whose

NRDAX-T0023 - Coalesced Packet Buffer Leak

2026-07-11T00:00:00Z

QUIC-LEAK / CVE-2025-54939: LSQUIC pre-handshake `packet_in` memory leak from coalesced Initial packets (CVSS 7.5 AV:N/AC:L/PR:N/UI:N/A:H, CWE-401+CWE-770; affected LSQUIC < 4.3.1, fixed 4.3.1 / OpenL

NRDAX-T0351 - Unvalidated DHT Record Storage Exhaustion

2026-07-10T00:00:00Z

CVE-2026-45783 / GHSA-32mq-hpph-xfvr: the libp2p Kademlia DHT (@libp2p/kad-dht (npm, js-libp2p), affected < 16.2.6) accepts and persists PUT_VALUE records with no effective validation, count, or byte

NRDAX-T0327 - Unbounded Registration Storage Exhaustion

2026-07-10T00:00:00Z

CVE-2026-35457 (GHSA-v5hw-cv9c-rpg7): libp2p-rendezvous server stores DISCOVER pagination cookies in an unbounded in-memory map (Registrations::cookies) with no size cap / eviction / expiry - a flood

NRDAX-T0321 - Unbounded Connection ID Storage

2026-07-10T00:00:00Z

quic-go connection-ID memory exhaustion (CVE-2024-22189, GHSA-c33x-xqrf-c478): on an established QUIC connection the attacker floods NEW_CONNECTION_ID frames (type 0x18) with an escalating 'Retire Pri

NRDAX-T0196 - Path Migration Challenge Queue Exhaustion

2026-07-10T00:00:00Z

quiche QUIC PATH_CHALLENGE unbounded-queue flood (CVE-2023-6193): flood of QUIC 1-RTT short-header packets on one DCID arriving from CHANGING source paths (rotating loopback 4-tuples = QUIC connection

NRDAX-T0195 - Path Challenge Response Memory Exhaustion

2026-07-10T00:00:00Z

quic-go QUIC path-validation memory exhaustion (CVE-2023-49295): flood of QUIC v1 short-header (1-RTT) packets each carrying PATH_CHALLENGE frame(s) (type 0x1a + 8B challenge data). Each PATH_CHALLENG

NRDAX-T0185 - Out-Of-Order Stream Reassembly OOM

2026-07-10T00:00:00Z

quinn-proto out-of-order stream reassembly memory exhaustion (GHSA-4w2j-m93h-cj5j / RUSTSEC-2026-0185, CVSS 7.5 AV:N/AC:L/PR:N/UI:N/A:H, CWE-770; affected quinn-proto < 0.11.15, fixed 0.11.15). An una

NRDAX-T0182 - Optimistic ACK Congestion Window Manipulation

2026-07-10T00:00:00Z

quiche optimistic-ACK congestion-window growth (CVE-2025-4820): a QUIC peer completes a handshake, initiates a congestion-controlled transfer toward itself, then sends ACK frames (type 0x02 / 0x03) ac

NRDAX-T0042 - Crypto Frame Reassembly Buffer Exhaustion

2026-07-10T00:00:00Z

quiche QUIC CRYPTO-frame flood (CVE-2024-1765): flood of QUIC long-header packets each carrying a CRYPTO frame (type 0x06) whose offset escalates by a fixed stride (4096) - leaving the crypto reassemb

NRDAX-T0326 - Unbounded Peer-Slot Sybil

2026-07-09T00:00:00Z

Sybil (SlowMist Blockchain Common Vulnerability List): a flood of full RLPx+eth-handshake peers each with a DISTINCT node identity occupies the target's inbound peer slots and biases peer selection (e

NRDAX-T0307 - Transaction Malleability

2026-07-09T00:00:00Z

Transaction Malleability (SlowMist Blockchain Common Vulnerability List): a tx and a malleated sibling with a byte-different scriptSig (extra OP_NOP) → different txid, identical inputs/outputs/effect;

NRDAX-T0292 - Sync Height Manipulation Stall

2026-07-09T00:00:00Z

CVE-2025-24371 (ASA-2025-001 / GHSA-22qq-3xwm-r5x4): a malicious CometBFT blocksync peer disrupts a node's ability to sync. In blocksync a peer reports its base/latest heights in a StatusResponse; the

NRDAX-T0254 - Repair Protocol Legacy Request Stall

2026-07-09T00:00:00Z

Solana repair-protocol orphan DoS (solana-labs/solana v1.1.16, PR #10290): a legacy no-nonce RepairProtocol::Orphan(ContactInfo, slot) request for a slot > UNLOCK_NONCE_SLOT makes the serving node's s

NRDAX-T0246 - Rate-Limit Key Confusion

2026-07-09T00:00:00Z

IC ingress-pool per-NodeId quota mis-key (IC_N1_INGRESS_POOL_QUOTA_MISKEY): every HTTP-arriving ingress message buckets under the carrier replica's own NodeId instead of the signing principal (call.rs

NRDAX-T0145 - Malformed HTTP Body Crash

2026-07-09T00:00:00Z

CVE-2026-41585 (GHSA-29x4-r6jv-ff4w): Zebra's JSON-RPC HTTP middleware treated a failure to read the incoming HTTP request body as an unrecoverable error, aborting the process instead of returning an

NRDAX-T0071 - Ethash Verification Memory Exhaustion

2026-07-09T00:00:00Z

CVE-2021-42219: go-ethereum v1.10.9 (and earlier pre-Merge ethash-verifying geth) - an unauthenticated remote peer floods a node with an excessive amount of block/header messages; to verify each block

NRDAX-T0061 - Duplicate Tx Mempool Index Desync

2026-07-09T00:00:00Z

CVE-2023-34451 (GHSA-w24w-wp77-qffm): the mempool's list + map index each other and can desync so the SAME tx appears multiple times in the list and can no longer be fully removed (only a restart clea

NRDAX-T0006 - Async Runtime Blocking VM Execution

2026-07-09T00:00:00Z

The simulateTransaction RPC handler executes the BPF VM synchronously on the calling Tokio worker thread (no spawn_blocking interposed), and because sigVerify defaults off and simulation is gas-free, an attacker can submit CU-maximizing transactions against pre-loaded programs at no cost. Each concurrent request pins a shared executor thread for the full simulation duration, so per-worker throughput degrades proportionally to concurrent request count, exhausting the bounded async worker pool and starving all other RPC handlers sharing it. The fix-class is interposing async offload (spawn_blocking / dedicated thread pool with backpressure) plus request-side CU/cost accounting for simulate calls, not just on-chain compute budgets.

NRDAX-T0369 - WebSocket Task Spawn Exhaustion

2026-07-08T00:00:00Z

NullRabbit source-traced H4 slow-read

NRDAX-T0202 - Peer Timestamp Skew Manipulation

2026-07-08T00:00:00Z

Timejacking (SlowMist Blockchain Common Vulnerability List; Culubas 2011): N peers advertise a version.timestamp skewed ~+70min (inside the AddTimeData ±70min acceptance window) → each peer's derived

NRDAX-T0056 - Duplicate Input Validation-Bypass Crash

2026-07-08T00:00:00Z

CVE-2018-17144: a block whose tx spends one outpoint twice (duplicate inputs); the 0.14 pre-relay optimization (PR#9049) skipped the duplicate-input check → assert(!coin.IsNull()) crash (0.14.x) / sup

NRDAX-T0041 - Cross-Chain Peer Pool Pollution

2026-07-08T00:00:00Z

Alien Attack (SlowMist 'peer-pool pollution'): a same-family but DIFFERENT-chain peer completes the chain-agnostic RLPx ECIES handshake + devp2p Hello and is admitted to the eth handshake; the chain c

NRDAX-T0328 - Unbounded Request Body Memory Exhaustion

2026-07-07T00:00:00Z

PRYSM_ATTESTER_SLASHING_PUBKEY_BURN (S4): POST /eth/v1/beacon/pool/attester_slashings_v2 decodes one AttesterSlashingElectra whose attesting_indices vector is capped only at the structural MaxValidato

NRDAX-T0211 - Premature Processing Index-Out-Of-Range Panic

2026-07-07T00:00:00Z

GHSA-p7mv-53f2-4cwj (ASA-2024-011): a Precommit with a non-nil BlockID + an attached vote extension is handled BEFORE the ValidatorIndex is verified → out-of-range ValidatorIndex → index-out-of-range

NRDAX-T0198 - Peer List Sort CPU Amplification

2026-07-07T00:00:00Z

Cardano PeerSharing MsgShareRequest O(N log N) sort CPU amp: sortBy+hashWithSalt over the ~3000-peer known set per request (~170 us), no idle timeout (Codec.hs:160), no per-peer rate limit. One post-h

NRDAX-T0165 - Missing Zero-Guard Divide-By-Zero Halt

2026-07-07T00:00:00Z

GHSA-x5vx-95h7-rv4p (cosmos-sdk <=0.47.15/<=0.50.11): x/group PercentageDecisionPolicy.Allow does yesCount.Quo(totalPower) with no totalPower==0 guard; a proposal on a group whose weight is driven to

NRDAX-T0156 - Mempool Pending Eviction Flood

2026-07-07T00:00:00Z

CVE-2022-23328 (go-ethereum, CVSS 7.5, all versions <1.10.13): an attacker node sends 5120 PENDING high-gas-price txns from ONE account that each fully spend the account's FULL BALANCE, in one eth Tra

NRDAX-T0148 - Malformed KZG Proof Mismatch DoS

2026-07-07T00:00:00Z

CVE-2026-22868 (CVSS 7.5): a batch of EIP-4844 type-3 blob txs announced then delivered (PooledTransactions) with structurally-valid KZG sidecars whose commitment/proof (over blob A) mismatch the carr

NRDAX-T0143 - Malformed Field Gossip Before Validation

2026-07-07T00:00:00Z

GHSA-hrhf-2vcr-ghch (ASA-2025-003): a BitArray whose declared Bits does not match its Elems count (len(Elems) != ceil(Bits/64)) is processed in an invalid state and gossiped to peers before validation

NRDAX-T0129 - Invalid Curve Point Panic

2026-07-07T00:00:00Z

CVE-2026-41584 (GHSA-452v-w3gx-72wg): a V5/NU5 tx whose Orchard action rk is the IDENTITY point [0x00;32] - a canonical point the spec allows, so it passes parse + hash() - but Orchard proof verificat

NRDAX-T0122 - Integer Signedness Index OOB Crash

2026-07-07T00:00:00Z

CVE-2021-3121 (gogoproto 'skippy peanut butter'): unknown length-delimited field with a negative-length varint → pre-1.3.2 skip code does iNdEx+=length with no length<0 check → index out of bounds → p

NRDAX-T0101 - Handshake Crypto Validation Bypass Crash

2026-07-07T00:00:00Z

CVE-2025-24883: RLPx auth with an all-zero (off-curve) EC pubkey - geth <1.14.13 skips the secp256k1 point-validity check → handshake crypto crash (fixed 159fb1a)

NRDAX-T0038 - Count Underflow Header Serving Amplification

2026-07-07T00:00:00Z

CVE-2024-32972: eth GetBlockHeaders amount=0 → count-1 underflows to UINT64_MAX → bypasses maxHeadersServe → serves all headers to genesis → memory exhaustion (geth <1.13.15)

NRDAX-T0024 - Compact Block FillBlock Duplicate Crash

2026-07-07T00:00:00Z

CVE-2024-35202: blocktxn with txns not committed to the block merkle root → FillBlock called twice → assertion + node exit (Bitcoin Core <25.0)

NRDAX-T0207 - Pre-Verify Gossip Flood

2026-07-04T00:00:00Z

CometBFT consensus DataChannel(0x21) ProposalMessage flood: valid-shape Proposal passes ValidateBasic but the RLock+queue path runs before deferred sig-verify - the N1.4 family HEAD (vote-flood + bloc

NRDAX-T0187 - Oversized Block Response Flood

2026-07-04T00:00:00Z

CometBFT BlocksyncChannel(0x40) oversized BlockResponse (up to 9000 CommitSigs, ~900KB): the Block decode + ValidateBasic at https://github.com/cometbft/cometbft/blob/v0.38.22/blocksync/reactor.go is

NRDAX-T0064 - Endpoint Concurrency Cap Exhaustion

2026-07-04T00:00:00Z

cosmos-sdk server/grpc/server.go grpc.NewServer w/o grpc.MaxConcurrentStreams -> grpc-go default effectively unbounded + no SETTINGS_MAX_CONCURRENT_STREAMS signalled; attacker holds many HTTP/2 stream

NRDAX-T0352 - Unvalidated Field Length Panic

2026-07-03T00:00:00Z

Agave snapshot AppendVec StoredMeta.data_len > MAX_PERMITTED_DATA_LENGTH (10 MiB) survives new_for_startup (sanitize skipped) -> index-gen scan_accounts QuotaExceeded -> .expect("must scan accounts st

NRDAX-T0291 - Subscription Permit Exhaustion

2026-07-03T00:00:00Z

C04 (COSMOS_SUBSCRIBE_PERCONN_CAP): CometBFT rpc/core/events.go:27 caps NumClients>=MaxSubscriptionClients(100) but clientID=RemoteAddr(ip:PORT) → each TCP conn gets an independent per-client cap → su

NRDAX-T0248 - Recursive Filter Expression CPU Blowup

2026-07-03T00:00:00Z

IOTA_S1_EVENTFILTER_EXPONENTIAL: iotax_subscribeEvent depth-D balanced Or-tree filter → exponential CPU

NRDAX-T0097 - gRPC/H2 Multiplexing OOM

2026-07-03T00:00:00Z

NullRabbit measurement (gRPC/h2 multiplex DoS).

NRDAX-T0171 - Nil Node Dereference Panic

2026-07-02T00:00:00Z

CVE-2020-26264: a crafted LES GetProofsV2 storage-proof request (non-empty AccKey for a non-existent account) dereferences a nil account trie in the les server's GetProofsV2 handler → panic/crash (get

NRDAX-T0166 - Move Verifier Fixpoint CPU Exhaustion

2026-07-02T00:00:00Z

CertiK Skyfall HamsterWheel: crafted-CFG Move module defeats id_leak_verifier fixpoint → infinite re-analysis → CPU halt

NRDAX-T0142 - Malformed Bytecode Index Panic

2026-07-02T00:00:00Z

CertiK Skyfall: Publish RPC disassembles a malformed Move module (empty code_unit) → index panic → RPC crash

NRDAX-T0025 - Compact Block Size Integer Overflow

2026-07-02T00:00:00Z

CVE-2025-46597: cmpctblock declaring >1GB short-ids → 32-bit size-calc overflow

NRDAX-T0355 - Unvalidated Relay Map Memory Exhaustion

2026-07-01T00:00:00Z

CVE-2016-10724: pre-0.13.0 alert messages stored in an unbounded map → memory exhaustion

NRDAX-T0354 - Unvalidated Inventory Tracking Memory Exhaustion

2026-07-01T00:00:00Z

CVE-2018-17145 (INVDoS): random-hash INV flood → unbounded tx-tracking memory

NRDAX-T0350 - Unsolicited Block State Poisoning

2026-07-01T00:00:00Z

CVE-2024-52921: unrequested merkle-mismatched block erases other peers' download state → hinders propagation

NRDAX-T0345 - Unrated GetHeaders Response Flood

2026-07-01T00:00:00Z

CVE-2023-33297 (drain): un-rate-limited getheaders flood → >100MB/s upload (Bitcoin/Litecoin/Dogecoin)

NRDAX-T0331 - Unbounded Stream Backpressure OOM

2026-07-01T00:00:00Z

CVE-2022-23492/CVE-2022-23486: libp2p stream/connection exhaustion (no backpressure) → OOM

NRDAX-T0312 - Tx-Relay Throughput Jamming

2026-07-01T00:00:00Z

CVE-2024-55563 (Bitcoin Core <= 27.2): transaction-relay jamming via an off-chain protocol attack ('Transaction-Relay Throughput Overflow Attacks against Off-Chain Protocols'; related to CVE-2024-5291

NRDAX-T0249 - Recursive Message Deserialisation Stack Overflow

2026-07-01T00:00:00Z

GHSA-8wcc-m6j2-qxvm (ASA-2024-0012/0013): deeply-nested protobuf Any → TxDecoder/UnpackAny stack-overflow / exponential CPU+mem in CheckTx (pre-validation)

NRDAX-T0206 - Pre-Handshake Packet Flood

2026-07-01T00:00:00Z

EL-2026-06 (EF public-disclosure): RLPx pre-auth packet flood → CPU/bandwidth exhaustion

NRDAX-T0184 - Orphan Tx Resolution CPU Amplification

2026-07-01T00:00:00Z

CVE-2024-52914: orphan-tx re-resolution O(outputs × 100 orphans) of expensive txs → multi-hour CPU stall

NRDAX-T0139 - Legacy Sighash Quadratic CPU Blowup

2026-07-01T00:00:00Z

CVE-2025-46598: non-standard tx with many legacy-sighash inputs → quadratic validation CPU, no peer penalty

NRDAX-T0131 - Invalid Message Log Flood

2026-07-01T00:00:00Z

CVE-2025-54605: flood of PoW-invalid blocks logged unconditionally → log/disk fill

NRDAX-T0124 - INV Flood GetHeaders Amplification

2026-07-01T00:00:00Z

CVE-2024-52915: INV with 50k items → 50k getheaders replies / send-buffer blowup

NRDAX-T0106 - Header-Length Preallocation OOM

2026-07-01T00:00:00Z

CVE-2015-3641: header length field pre-allocates the receive buffer before the body → per-connection OOM

NRDAX-T0099 - Half-Open Handshake Slowloris

2026-07-01T00:00:00Z

IC quic_transport half-open QUIC handshake memory pin (IC_QUIC_HALFOPEN_PIN): a burst of QUIC v1 Initial packets (distinct SCID each) whose CRYPTO frame declares a large TLS handshake length (4096) bu

NRDAX-T0088 - GetData Request Flood

2026-07-01T00:00:00Z

CVE-2024-52920 class: oversized GETDATA processing load

NRDAX-T0076 - Expensive Debug RPC Compute Amplification

2026-07-01T00:00:00Z

debug_traceCall compute amplification (geth: debug API is DoS-prone, do not expose)

NRDAX-T0013 - Bloom Filter Divide-By-Zero Crash

2026-07-01T00:00:00Z

CVE-2013-5700: empty BIP37 bloom filter → modulo-by-zero in CBloomFilter::Hash() → crash

NRDAX-T0342 - Unindexed Account Scan CPU Amplification

2026-06-30T00:00:00Z

E28/SOL_P07: getProgramAccounts filter-miss CPU scan (agave rpc.rs:2235-2251)

NRDAX-T0261 - RPC Request Flood

2026-06-30T00:00:00Z

eth RPC request-flood (full-tx block fetch sustained at high rate)

NRDAX-T0373 - WebTransport Stream Map Leak OOM

2026-01-01T00:00:00Z

WebTransport Stream Map Leak OOM

NRDAX-T0371 - WebTransport Close Handler Deadlock

2026-01-01T00:00:00Z

WebTransport Close Handler Deadlock

NRDAX-T0370 - WebTransport Capsule Memory Exhaustion

2026-01-01T00:00:00Z

WebTransport Capsule Memory Exhaustion

NRDAX-T0358 - URL Path Encoding Auth Bypass

2026-01-01T00:00:00Z

URL Path Encoding Auth Bypass

NRDAX-T0353 - Unvalidated Header Buffer OOM

2026-01-01T00:00:00Z

CVE-2024-52916: difficulty-1 headers with parent=genesis → mapBlockIndex unbounded growth → memory DoS

NRDAX-T0333 - Unbounded Subscription Flood

2026-01-01T00:00:00Z

NullRabbit source-traced IOTA GraphQL unbounded-subscription flood (operator-gated).

NRDAX-T0322 - Unbounded Deserialisation OOM

2026-01-01T00:00:00Z

Unbounded Deserialisation OOM

NRDAX-T0318 - Unauthenticated RPC Command Execution

2026-01-01T00:00:00Z

Unauthenticated RPC Command Execution

NRDAX-T0305 - TLS SNI mTLS Bypass

2026-01-01T00:00:00Z

TLS SNI mTLS Bypass

NRDAX-T0274 - Sigop Undercount Consensus Split

2026-01-01T00:00:00Z

Sigop Undercount Consensus Split

NRDAX-T0264 - Scope Permission Bypass Unauthorized Write

2026-01-01T00:00:00Z

Scope Permission Bypass Unauthorized Write

NRDAX-T0257 - Rogue-Key Aggregate Signature Forgery

2026-01-01T00:00:00Z

Rogue-Key Aggregate Signature Forgery

NRDAX-T0245 - QUIC Varint Parsing Panic

2026-01-01T00:00:00Z

QUIC Varint Parsing Panic

NRDAX-T0232 - QUIC/HTTP3 Header Memory Exhaustion

2026-01-01T00:00:00Z

QUIC/HTTP3 Header Memory Exhaustion

NRDAX-T0217 - QUIC Amplification Limit Bypass

2026-01-01T00:00:00Z

QUIC Amplification Limit Bypass

NRDAX-T0213 - Protocol Message CPU Burn

2026-01-01T00:00:00Z

Protocol Message CPU Burn

NRDAX-T0212 - Proof Verification Bypass

2026-01-01T00:00:00Z

Proof Verification Bypass

NRDAX-T0210 - Premature Disconnect Request Handling Crash

2026-01-01T00:00:00Z

Premature Disconnect Request Handling Crash

NRDAX-T0188 - Oversized Control-Message Array CPU Burn

2026-01-01T00:00:00Z

CVE-2026-49866: gossipsub oversized IHAVE/IWANT control-message arrays (huge messageID lists) → per-ID processing → CPU DoS

NRDAX-T0180 - OIDC Identity Verification Bypass

2026-01-01T00:00:00Z

OIDC Identity Verification Bypass

NRDAX-T0151 - Malformed Transaction Field Panic

2026-01-01T00:00:00Z

Malformed Transaction Field Panic

NRDAX-T0123 - Interlink Mismatch Consensus Failure

2026-01-01T00:00:00Z

Interlink Mismatch Consensus Failure

NRDAX-T0104 - Hash Collision Forgery

2026-01-01T00:00:00Z

Hash Collision Forgery

NRDAX-T0102 - Handshake Key Validation Info Leak

2026-01-01T00:00:00Z

Handshake Key Validation Info Leak

NRDAX-T0083 - Frame Parsing Memory Amplification

2026-01-01T00:00:00Z

Frame Parsing Memory Amplification

NRDAX-T0079 - Field Element Comparison Bypass

2026-01-01T00:00:00Z

Field Element Comparison Bypass

NRDAX-T0049 - DHT PUT_VALUE Disk Exhaustion

2026-01-01T00:00:00Z

DHT PUT_VALUE Disk Exhaustion

NRDAX-T0048 - Dependency Use-After-Free Corruption

2026-01-01T00:00:00Z

Dependency Use-After-Free Corruption

NRDAX-T0008 - Authorization Check Bypass RCE

2026-01-01T00:00:00Z

Authorization Check Bypass RCE

NRDAX-T0380 - zkVM Guest Memory Safety

2025-01-01T00:00:00Z

zkVM Guest Memory Safety

NRDAX-T0335 - Unchecked Inherent Manipulation

2025-01-01T00:00:00Z

Unchecked Inherent Manipulation

NRDAX-T0329 - Unbounded RPC Response Amplification

2025-01-01T00:00:00Z

The node's JSON-RPC handler for batched account-lookup calls (e.g. getMultipleAccounts) imposes no response-size accounting or cost weighting relative to request size, only a flat cap on key count. An attacker submits a small request (~4.8KB) listing well-known large program accounts (Token/BPFLoader2/BPFLoaderUpgradeable), whose ELF/program data stubs are echoed in full, driving a single request to a ~17.8MB response (3,708x amplification) and sustained ~830MB/s egress under parallel workers. The fix-class is response-size-aware rate limiting/cost accounting on batched read RPCs (weighting by bytes returned, not just item count), not a request-count cap.

NRDAX-T0301 - TLS Certificate Parsing Crash

2025-01-01T00:00:00Z

TLS Certificate Parsing Crash

NRDAX-T0272 - Signer Index Overflow Crash

2025-01-01T00:00:00Z

Signer Index Overflow Crash

NRDAX-T0250 - Regex Schema Validation ReDoS

2025-01-01T00:00:00Z

Regex Schema Validation ReDoS

NRDAX-T0239 - QUIC Path Probe Nil-Pointer Crash

2025-01-01T00:00:00Z

QUIC Path Probe Nil-Pointer Crash

NRDAX-T0231 - QUIC Handshake State Confusion Crash

2025-01-01T00:00:00Z

QUIC Handshake State Confusion Crash

NRDAX-T0223 - QUIC Connection ID Retirement Infinite Loop

2025-01-01T00:00:00Z

QUIC Connection ID Retirement Infinite Loop

NRDAX-T0221 - QUIC Congestion Control Manipulation

2025-01-01T00:00:00Z

QUIC Congestion Control Manipulation

NRDAX-T0208 - Precompile Cryptographic Miscomputation

2025-01-01T00:00:00Z

Precompile Cryptographic Miscomputation

NRDAX-T0135 - L1 Finality Assumption Reorg

2025-01-01T00:00:00Z

L1 Finality Assumption Reorg

NRDAX-T0130 - Invalid Finality Signature Bypass

2025-01-01T00:00:00Z

Invalid Finality Signature Bypass

NRDAX-T0119 - Integer Overflow Decompression Infinite Loop

2025-01-01T00:00:00Z

Integer Overflow Decompression Infinite Loop

NRDAX-T0080 - Finality Justification Cache Bypass

2025-01-01T00:00:00Z

Finality Justification Cache Bypass

NRDAX-T0072 - Event Stream Endpoint Crash DoS

2025-01-01T00:00:00Z

Event Stream Endpoint Crash DoS

NRDAX-T0040 - Crafted Transaction Processing DoS

2025-01-01T00:00:00Z

Crafted Transaction Processing DoS

NRDAX-T0367 - Vote Extension Validation Panic

2024-01-01T00:00:00Z

Vote Extension Validation Panic

NRDAX-T0361 - Vesting Logic Exploit

2024-01-01T00:00:00Z

Vesting Logic Exploit

NRDAX-T0313 - Transaction Validation Logic Consensus Split

2024-01-01T00:00:00Z

Transaction Validation Logic Consensus Split

NRDAX-T0311 - Transaction Relay Suppression

2024-01-01T00:00:00Z

Transaction Relay Suppression

NRDAX-T0306 - Token Supply Inflation Bug

2024-01-01T00:00:00Z

Token Supply Inflation Bug

NRDAX-T0298 - Timestamp Integer Overflow Netsplit

2024-01-01T00:00:00Z

CVE-2024-52912: version nTime=INT64_MIN → abs64 overflow skews adjusted-network-time → netsplit

NRDAX-T0295 - Sync-State Poisoning Via Fake Blocks

2024-01-01T00:00:00Z

CVE-2026-52737 (GHSA-gvjc-3w7c-92jx): a single unauthenticated Zcash P2P peer answers the syncing node's getblocks/FindBlocks with a two-hash inv, then serves a `block` whose coinbase height is above

NRDAX-T0275 - Single-Peer Block-Discovery Stall

2024-01-01T00:00:00Z

CVE-2024-52922: cmpctblock announce then stall (never answer getblocktxn) → ~10min delayed propagation

NRDAX-T0226 - QUIC Crypto Frame Flood

2024-01-01T00:00:00Z

QUIC Crypto Frame Flood

NRDAX-T0222 - QUIC Connection ID Exhaustion

2024-01-01T00:00:00Z

QUIC Connection ID Exhaustion

NRDAX-T0194 - P2P Message Race Condition Crash

2024-01-01T00:00:00Z

P2P Message Race Condition Crash

NRDAX-T0192 - Oversized Transaction Block-Fill

2024-01-01T00:00:00Z

CVE-2019-11636 (Zcash 'Sapling Wood-Chipper'): Zcash 2.x raised the max transaction size from 100 KB to the full block size after Sapling, letting an attacker cheaply build block-filling shielded txs

NRDAX-T0183 - Orphan Transaction Processing DoS

2024-01-01T00:00:00Z

Orphan Transaction Processing DoS

NRDAX-T0181 - Onion Message Parsing OOM

2024-01-01T00:00:00Z

Onion Message Parsing OOM

NRDAX-T0160 - Message Field Integer Overflow OOM

2024-01-01T00:00:00Z

Message Field Integer Overflow OOM

NRDAX-T0152 - Malformed UPnP Response Infinite Loop

2024-01-01T00:00:00Z

Malformed UPnP Response Infinite Loop

NRDAX-T0144 - Malformed GETDATA Infinite Loop

2024-01-01T00:00:00Z

Malformed GETDATA Infinite Loop

NRDAX-T0114 - ICMP PMTUD Injection Disruption

2024-01-01T00:00:00Z

ICMP PMTUD Injection Disruption

NRDAX-T0026 - Compiler Execution Order Bug

2024-01-01T00:00:00Z

Compiler Execution Order Bug

NRDAX-T0022 - Client Library Supply Chain Compromise

2024-01-01T00:00:00Z

Client Library Supply Chain Compromise

NRDAX-T0001 - Addr Message Counter Overflow Crash

2024-01-01T00:00:00Z

CVE-2024-52919 (GHSA-qwp9-p9rr-h729): addr flood → CAddrMan 32-bit nIdCount overflow → assertion abort

NRDAX-T0286 - State Channel Replay Attack

2023-01-01T00:00:00Z

State Channel Replay Attack

NRDAX-T0285 - State Channel Logic Flaw

2023-01-01T00:00:00Z

State Channel Logic Flaw

NRDAX-T0263 - RPC Serialization Deadlock

2023-01-01T00:00:00Z

RPC Serialization Deadlock

NRDAX-T0238 - QUIC Path Challenge Flood

2023-01-01T00:00:00Z

QUIC Path Challenge Flood

NRDAX-T0214 - Protocol Message Flood Unbounded Goroutine

2023-01-01T00:00:00Z

CVE-2023-40591: post-Hello devp2p PING (0x02) flood → unbounded goroutines → OOM (geth 1.10.0-1.12.0)

NRDAX-T0199 - Peer-Record Flood OOM

2023-01-01T00:00:00Z

CVE-2023-40583: unchecked signed peer-record flood (peer-exchange) → go-libp2p peerstore OOM

NRDAX-T0126 - Inv Queue Draining CPU DoS

2023-01-01T00:00:00Z

Inv Queue Draining CPU DoS

NRDAX-T0112 - HTTP/2 Rapid Reset Stream Exhaustion

2023-01-01T00:00:00Z

CVE-2023-26964 (RUSTSEC-2023-0034): the Rust h2 crate < 0.3.17 does not release stream memory immediately on RST_STREAM and - pre-0.3.17 - has NO bound on streams in the pending-accept-but-remotely-re

NRDAX-T0111 - HTTP/2 Rapid Reset Memory Exhaustion

2023-01-01T00:00:00Z

HTTP/2 Rapid Reset Memory Exhaustion

NRDAX-T0100 - Handshake Crypto CPU Burn

2023-01-01T00:00:00Z

Neodyme ND-FD1-MD-02: QUIC INITIAL flood → per-handshake x25519 + ed25519 sign-tile CPU exhaustion (compute-bound, distinct from the connection-slot flood)

NRDAX-T0098 - Guest Module Memory Corruption

2023-01-01T00:00:00Z

Guest Module Memory Corruption

NRDAX-T0095 - GraphQL Alias Query Amplification

2023-01-01T00:00:00Z

CVE-2023-42319: geth <=1.13.4 --http --graphql; a query with N aliased logs(filter:{fromBlock:0}) ops -> unbounded per-alias full-chain scan -> memory blowup

NRDAX-T0060 - Duplicate Transaction Memory Leak

2023-01-01T00:00:00Z

Duplicate Transaction Memory Leak

NRDAX-T0050 - DHT Sybil Content Censorship

2023-01-01T00:00:00Z

CVE-2023-26248 / GHSA-mqr9-hjr8-2m9w: Content Censorship in IPFS via Kademlia DHT abuse. The libp2p Kademlia DHT (go-libp2p-kad-dht (Go; as shipped in go-ipfs/kubo), affected go-libp2p-kad-dht <= 0.20

NRDAX-T0044 - Data Limit Bypass State Bloat

2023-01-01T00:00:00Z

Data Limit Bypass State Bloat

NRDAX-T0374 - Witness Block Parsing DoS

2022-01-01T00:00:00Z

Witness Block Parsing DoS

NRDAX-T0359 - Verbose Logging Triggered Crash

2022-01-01T00:00:00Z

Verbose Logging Triggered Crash

NRDAX-T0348 - Unsafe Deserialization RCE

2022-01-01T00:00:00Z

Unsafe Deserialization RCE

NRDAX-T0332 - Unbounded Stream Resource Exhaustion

2022-01-01T00:00:00Z

Unbounded Stream Resource Exhaustion

NRDAX-T0296 - Template Injection RCE

2022-01-01T00:00:00Z

Template Injection RCE

NRDAX-T0205 - Pre-Handshake Crypto CPU Burn

2022-01-01T00:00:00Z

Bitcoin Core BIP-324 v2 transport pre-auth CPU burn: the 64-byte inbound ellswift key triggers secp256k1 ellswift ECDH + HKDF-SHA256 BEFORE any auth/rate-limit; only the soft 125-inbound cap gates, ac

NRDAX-T0191 - Oversized Script Validation Bypass

2022-01-01T00:00:00Z

Oversized Script Validation Bypass

NRDAX-T0155 - Mempool Flood Eviction

2022-01-01T00:00:00Z

Mempool Flood Eviction

NRDAX-T0118 - Integer Overflow Consensus Split

2022-01-01T00:00:00Z

Integer Overflow Consensus Split

NRDAX-T0116 - Incomplete Packet Timer Overflow CPU Burn

2022-01-01T00:00:00Z

Incomplete Packet Timer Overflow CPU Burn

NRDAX-T0037 - Contract Logic Validation Bypass

2022-01-01T00:00:00Z

Contract Logic Validation Bypass

NRDAX-T0021 - Claim Migration Fund Drain

2022-01-01T00:00:00Z

Claim Migration Fund Drain

NRDAX-T0015 - Chain ID Validation Missing

2022-01-01T00:00:00Z

Chain ID Validation Missing

NRDAX-T0003 - Arithmetic Bug Fund Miscalculation

2022-01-01T00:00:00Z

Arithmetic Bug Fund Miscalculation

NRDAX-T0362 - VM Integer Overflow Memory Corruption

2021-01-01T00:00:00Z

VM Integer Overflow Memory Corruption

NRDAX-T0343 - Uninitialized Buffer Memory Disclosure

2021-01-01T00:00:00Z

Uninitialized Buffer Memory Disclosure

NRDAX-T0304 - TLS Renegotiation Crash

2021-01-01T00:00:00Z

TLS Renegotiation Crash

NRDAX-T0267 - Signature Malleability Consensus Manipulation

2021-01-01T00:00:00Z

Signature Malleability Consensus Manipulation

NRDAX-T0258 - RPC Arbitrary File Write

2021-01-01T00:00:00Z

RPC Arbitrary File Write

NRDAX-T0255 - Transaction Replay Auth Bypass

2021-01-01T00:00:00Z

Transaction Replay Auth Bypass

NRDAX-T0178 - Null-Deref Crash via Crafted Input

2021-01-01T00:00:00Z

Null-Deref Crash via Crafted Input

NRDAX-T0176 - Nondeterministic Execution Consensus Split

2021-01-01T00:00:00Z

Nondeterministic Execution Consensus Split

NRDAX-T0140 - Log Injection RCE

2021-01-01T00:00:00Z

Log Injection RCE

NRDAX-T0078 - Fee-Bump Replacement Policy Bypass

2021-01-01T00:00:00Z

Fee-Bump Replacement Policy Bypass

NRDAX-T0075 - EVM Opcode/Precompile Semantics Divergence

2021-01-01T00:00:00Z

EVM Opcode/Precompile Semantics Divergence

NRDAX-T0074 - EVM Memory Corruption Consensus Split

2021-01-01T00:00:00Z

EVM Memory Corruption Consensus Split

NRDAX-T0073 - Evidence Timestamp Inconsistency DoS

2021-01-01T00:00:00Z

Evidence Timestamp Inconsistency DoS

NRDAX-T0070 - Ethash Cache Generation Memory Exhaustion

2021-01-01T00:00:00Z

Ethash Cache Generation Memory Exhaustion

NRDAX-T0063 - Dust Value Griefing

2021-01-01T00:00:00Z

Dust Value Griefing

NRDAX-T0062 - Dust Output Consensus Mishandling

2021-01-01T00:00:00Z

Dust Output Consensus Mishandling

NRDAX-T0028 - Compressed Message Decompression Crash

2021-01-01T00:00:00Z

Compressed Message Decompression Crash

NRDAX-T0007 - Authentication Message Replay

2021-01-01T00:00:00Z

Authentication Message Replay

NRDAX-T0385 - Invalid Block Disk Replay Exhaustion

2020-01-01T00:00:00Z

Invalid Block Disk Replay Exhaustion

NRDAX-T0381 - ZMQ Message Error-Handling Crash

2020-01-01T00:00:00Z

ZMQ Message Error-Handling Crash

NRDAX-T0379 - ZK Verifier Panic Crash

2020-01-01T00:00:00Z

ZK Verifier Panic Crash

NRDAX-T0377 - Zero-Length Field Panic Crash

2020-01-01T00:00:00Z

Zero-Length Field Panic Crash

NRDAX-T0376 - XML Namespace Declaration Memory Exhaustion

2020-01-01T00:00:00Z

XML Namespace Declaration Memory Exhaustion

NRDAX-T0375 - XML Attribute Parsing Quadratic CPU Exhaustion

2020-01-01T00:00:00Z

XML Attribute Parsing Quadratic CPU Exhaustion

NRDAX-T0372 - WebTransport Message Parsing Crash

2020-01-01T00:00:00Z

WebTransport Message Parsing Crash

NRDAX-T0368 - Vote Signature Late Verification Resource Exhaustion

2020-01-01T00:00:00Z

Vote Signature Late Verification Resource Exhaustion

NRDAX-T0366 - Vote Extension Power Mutation

2020-01-01T00:00:00Z

Vote Extension Power Mutation

NRDAX-T0365 - VM Stack Underflow Panic

2020-01-01T00:00:00Z

VM Stack Underflow Panic

NRDAX-T0364 - VM Stack Overflow Crash

2020-01-01T00:00:00Z

VM Stack Overflow Crash

NRDAX-T0363 - VM Resource Exhaustion OOM

2020-01-01T00:00:00Z

VM Resource Exhaustion OOM

NRDAX-T0360 - Vesting Account Creation Front-Running

2020-01-01T00:00:00Z

Vesting Account Creation Front-Running

NRDAX-T0356 - UPnP Gateway Event Panic Crash

2020-01-01T00:00:00Z

UPnP Gateway Event Panic Crash

NRDAX-T0346 - Unresolvable Finalized Block Wedge

2020-01-01T00:00:00Z

Unresolvable Finalized Block Wedge

NRDAX-T0344 - Uninitialized Memory Disclosure

2020-01-01T00:00:00Z

Uninitialized Memory Disclosure

NRDAX-T0341 - Unhandled RPC Error Panic

2020-01-01T00:00:00Z

Unhandled RPC Error Panic

NRDAX-T0340 - Unhandled Promise Rejection Crash

2020-01-01T00:00:00Z

Unhandled Promise Rejection Crash

NRDAX-T0339 - Unhandled Fork Event Panic

2020-01-01T00:00:00Z

Unhandled Fork Event Panic

NRDAX-T0338 - Unhandled Enum Variant Panic

2020-01-01T00:00:00Z

Unhandled Enum Variant Panic

NRDAX-T0336 - Unchecked Memory Write Panic

2020-01-01T00:00:00Z

Unchecked Memory Write Panic

NRDAX-T0334 - Unbounded Task Spawn Resource Exhaustion

2020-01-01T00:00:00Z

Unbounded Task Spawn Resource Exhaustion

NRDAX-T0330 - Unbounded Signature Verification CPU Exhaustion

2020-01-01T00:00:00Z

Unbounded Signature Verification CPU Exhaustion

NRDAX-T0325 - Unbounded Message Loop Halt

2020-01-01T00:00:00Z

Unbounded Message Loop Halt

NRDAX-T0324 - Unbounded Log Range Scan Amplification

2020-01-01T00:00:00Z

Unbounded Log Range Scan Amplification

NRDAX-T0323 - Unbounded Filter Subscription Storage Exhaustion

2020-01-01T00:00:00Z

Unbounded Filter Subscription Storage Exhaustion

NRDAX-T0320 - Unbounded Connection Flood

2020-01-01T00:00:00Z

CVE-2020-5303 (Lavender): unlimited CometBFT P2P connection requests → OOM + activeIDs-map saturation

NRDAX-T0316 - Unaligned Memory Access Crash

2020-01-01T00:00:00Z

Unaligned Memory Access Crash

NRDAX-T0315 - TxPool Message Flood OOM

2020-01-01T00:00:00Z

TxPool Message Flood OOM

NRDAX-T0314 - TxPool Crafted Transaction Crash

2020-01-01T00:00:00Z

TxPool Crafted Transaction Crash

NRDAX-T0310 - Tx Malleability Non-Consensus

2020-01-01T00:00:00Z

Tx Malleability Non-Consensus

NRDAX-T0309 - Tx History Storage Flood Disk Exhaustion

2020-01-01T00:00:00Z

Tx History Storage Flood Disk Exhaustion

NRDAX-T0308 - Transaction History Storage Exhaustion

2020-01-01T00:00:00Z

Transaction History Storage Exhaustion

NRDAX-T0302 - TLS Handshake Fragmentation Panic

2020-01-01T00:00:00Z

TLS Handshake Fragmentation Panic

NRDAX-T0300 - Timing Side-Channel Deanonymization

2020-01-01T00:00:00Z

Timing Side-Channel Deanonymization

NRDAX-T0299 - Timestamp Validation Panic Crash

2020-01-01T00:00:00Z

Timestamp Validation Panic Crash

NRDAX-T0297 - Timejacking Via Version Message

2020-01-01T00:00:00Z

Timejacking Via Version Message

NRDAX-T0294 - Sync State Deadlock Crash

2020-01-01T00:00:00Z

Sync State Deadlock Crash

NRDAX-T0293 - Sync Request Loop OOM

2020-01-01T00:00:00Z

Sync Request Loop OOM

NRDAX-T0290 - Subscription Failure Panic Crash

2020-01-01T00:00:00Z

Subscription Failure Panic Crash

NRDAX-T0289 - Stream Abort Race Crash

2020-01-01T00:00:00Z

Stream Abort Race Crash

NRDAX-T0288 - State Sync Proposer Priority Mismatch Chain Split

2020-01-01T00:00:00Z

State Sync Proposer Priority Mismatch Chain Split

NRDAX-T0287 - State Simulation Copy Panic

2020-01-01T00:00:00Z

State Simulation Copy Panic

NRDAX-T0284 - State Archive Restore Corruption Crash

2020-01-01T00:00:00Z

State Archive Restore Corruption Crash

NRDAX-T0283 - Stale State Reuse Crash

2020-01-01T00:00:00Z

Stale State Reuse Crash

NRDAX-T0282 - Staking Slashing Evasion

2020-01-01T00:00:00Z

Staking Slashing Evasion

NRDAX-T0281 - SSH Password Authentication Exposure

2020-01-01T00:00:00Z

SSH Password Authentication Exposure

NRDAX-T0278 - Snapshot File Parsing Crash

2020-01-01T00:00:00Z

Snapshot File Parsing Crash

NRDAX-T0277 - Snapshot Chunk Oversized OOM

2020-01-01T00:00:00Z

Snapshot Chunk Oversized OOM

NRDAX-T0276 - Slashing Implementation Crash

2020-01-01T00:00:00Z

Slashing Implementation Crash

NRDAX-T0273 - Signer Mismatch Bypass

2020-01-01T00:00:00Z

Signer Mismatch Bypass

NRDAX-T0271 - Signer Double-Sign Prevention Gap

2020-01-01T00:00:00Z

Signer Double-Sign Prevention Gap

NRDAX-T0270 - Signature Verification OOB Read

2020-01-01T00:00:00Z

Signature Verification OOB Read

NRDAX-T0268 - Signature Recovery CPU Burn

2020-01-01T00:00:00Z

Signature Recovery CPU Burn

NRDAX-T0266 - Shred Replay Processing DoS

2020-01-01T00:00:00Z

Shred Replay Processing DoS

NRDAX-T0265 - Secret Key Validation Missing

2020-01-01T00:00:00Z

Secret Key Validation Missing

NRDAX-T0262 - RPC Request Memory Leak

2020-01-01T00:00:00Z

RPC Request Memory Leak

NRDAX-T0259 - RPC Integer Overflow Memory Corruption

2020-01-01T00:00:00Z

RPC Integer Overflow Memory Corruption

NRDAX-T0256 - Replay Status Handling Panic

2020-01-01T00:00:00Z

Replay Status Handling Panic

NRDAX-T0253 - Reorg Unfiltered Tx Crash Loop

2020-01-01T00:00:00Z

Reorg Unfiltered Tx Crash Loop

NRDAX-T0252 - Reorg-Triggered Block Request Crash

2020-01-01T00:00:00Z

Reorg-Triggered Block Request Crash

NRDAX-T0251 - Reorg Batch Size Overflow Crash

2020-01-01T00:00:00Z

Reorg Batch Size Overflow Crash

NRDAX-T0247 - Recursive Callback Stack Overflow Crash

2020-01-01T00:00:00Z

Recursive Callback Stack Overflow Crash

NRDAX-T0244 - QUIC Unauthenticated Close Frame Disruption

2020-01-01T00:00:00Z

QUIC Unauthenticated Close Frame Disruption

NRDAX-T0243 - Quic Transport Parameter Overflow Panic

2020-01-01T00:00:00Z

Quic Transport Parameter Overflow Panic

NRDAX-T0242 - QUIC Socket Queue Spin CPU Burn

2020-01-01T00:00:00Z

QUIC Socket Queue Spin CPU Burn

NRDAX-T0241 - QUIC PTO Timer Overflow Crash

2020-01-01T00:00:00Z

QUIC PTO Timer Overflow Crash

NRDAX-T0240 - QUIC Post-Close Packet Processing Crash

2020-01-01T00:00:00Z

QUIC Post-Close Packet Processing Crash

NRDAX-T0237 - QUIC Packet Processing Infinite Loop

2020-01-01T00:00:00Z

QUIC Packet Processing Infinite Loop

NRDAX-T0236 - Quic Packet Loss Calculation Panic

2020-01-01T00:00:00Z

Quic Packet Loss Calculation Panic

NRDAX-T0235 - QUIC Malformed Packet Crash

2020-01-01T00:00:00Z

QUIC Malformed Packet Crash

NRDAX-T0234 - QUIC Invalid Length Field Panic

2020-01-01T00:00:00Z

QUIC Invalid Length Field Panic

NRDAX-T0233 - Quic Http3 Nil Pointer Crash

2020-01-01T00:00:00Z

Quic Http3 Nil Pointer Crash

NRDAX-T0230 - QUIC Empty Header Panic

2020-01-01T00:00:00Z

QUIC Empty Header Panic

NRDAX-T0229 - QUIC Early Data Processing Disclosure

2020-01-01T00:00:00Z

QUIC Early Data Processing Disclosure

NRDAX-T0228 - QUIC Decryption Overflow Crash

2020-01-01T00:00:00Z

QUIC Decryption Overflow Crash

NRDAX-T0227 - QUIC Datagram Fragmentation Panic

2020-01-01T00:00:00Z

QUIC Datagram Fragmentation Panic

NRDAX-T0224 - QUIC Connection Migration Duplicate-ID Crash

2020-01-01T00:00:00Z

QUIC Connection Migration Duplicate-ID Crash

NRDAX-T0220 - QUIC Close Frame Parsing Panic

2020-01-01T00:00:00Z

QUIC Close Frame Parsing Panic

NRDAX-T0219 - Quic Client Hello Fragmentation Panic

2020-01-01T00:00:00Z

Quic Client Hello Fragmentation Panic

NRDAX-T0218 - Quic Chunks Drop Panic Crash

2020-01-01T00:00:00Z

Quic Chunks Drop Panic Crash

NRDAX-T0216 - QUIC Accept Error Panic Crash

2020-01-01T00:00:00Z

QUIC Accept Error Panic Crash

NRDAX-T0215 - Quic 0-RTT Race Memory Exhaustion

2020-01-01T00:00:00Z

Quic 0-RTT Race Memory Exhaustion

NRDAX-T0209 - Predicate Verification Liveness DoS

2020-01-01T00:00:00Z

Predicate Verification Liveness DoS

NRDAX-T0204 - Pre-Handshake Buffer Reservation Exhaustion

2020-01-01T00:00:00Z

Pre-Handshake Buffer Reservation Exhaustion

NRDAX-T0201 - Peer Reputation Demotion Race Crash

2020-01-01T00:00:00Z

Peer Reputation Demotion Race Crash

NRDAX-T0200 - Peer Record Signature Bypass Impersonation

2020-01-01T00:00:00Z

Peer Record Signature Bypass Impersonation

NRDAX-T0197 - Payload Window Overflow Memory Exhaustion

2020-01-01T00:00:00Z

Payload Window Overflow Memory Exhaustion

NRDAX-T0193 - P2P Layer Memory Leak OOM

2020-01-01T00:00:00Z

P2P Layer Memory Leak OOM

NRDAX-T0190 - Oversized Hex String Parsing CPU Exhaustion

2020-01-01T00:00:00Z

Oversized Hex String Parsing CPU Exhaustion

NRDAX-T0189 - Oversized Field Buffer Overflow

2020-01-01T00:00:00Z

Oversized Field Buffer Overflow

NRDAX-T0186 - Oversized Block Execution Panic Crash

2020-01-01T00:00:00Z

Oversized Block Execution Panic Crash

NRDAX-T0179 - Numeric Field Parsing Memory Exhaustion

2020-01-01T00:00:00Z

Numeric Field Parsing Memory Exhaustion

NRDAX-T0177 - Notification Handle Drop CPU Exhaustion

2020-01-01T00:00:00Z

Notification Handle Drop CPU Exhaustion

NRDAX-T0175 - Nonce Sequencing Proposal Degradation

2020-01-01T00:00:00Z

Nonce Sequencing Proposal Degradation

NRDAX-T0174 - Non-Exploitable Cryptographic Defect

2020-01-01T00:00:00Z

Non-Exploitable Cryptographic Defect

NRDAX-T0173 - Nil Response Consensus Engine Panic

2020-01-01T00:00:00Z

Nil Response Consensus Engine Panic

NRDAX-T0172 - Nil Reference Panic Crash

2020-01-01T00:00:00Z

Nil Reference Panic Crash

NRDAX-T0170 - Network-Triggered Runtime DoS

2020-01-01T00:00:00Z

Network-Triggered Runtime DoS

NRDAX-T0169 - Network Reconnaissance Scanning

2020-01-01T00:00:00Z

Network Reconnaissance Scanning

NRDAX-T0168 - Network Partition Consensus Panic Crash

2020-01-01T00:00:00Z

Network Partition Consensus Panic Crash

NRDAX-T0167 - Nested Execution State Corruption

2020-01-01T00:00:00Z

Nested Execution State Corruption

NRDAX-T0164 - Missing Crypto Provider Panic Crash

2020-01-01T00:00:00Z

Missing Crypto Provider Panic Crash

NRDAX-T0162 - Metrics Endpoint Resource Exhaustion

2020-01-01T00:00:00Z

Metrics Endpoint Resource Exhaustion

NRDAX-T0161 - Metric Collection Panic Crash

2020-01-01T00:00:00Z

Metric Collection Panic Crash

NRDAX-T0159 - Merkle Trie Memory Leak

2020-01-01T00:00:00Z

Merkle Trie Memory Leak

NRDAX-T0157 - Mempool Sender Spoofing Resource Exhaustion

2020-01-01T00:00:00Z

Mempool Sender Spoofing Resource Exhaustion

NRDAX-T0154 - Mempool Deadlock DoS

2020-01-01T00:00:00Z

Mempool Deadlock DoS

NRDAX-T0153 - Mempool Computational Complexity DoS

2020-01-01T00:00:00Z

Mempool Computational Complexity DoS

NRDAX-T0149 - Malformed Protocol Message Crash

2020-01-01T00:00:00Z

Malformed Protocol Message Crash

NRDAX-T0147 - Malformed HTTP/3 Frame Crash

2020-01-01T00:00:00Z

Malformed HTTP/3 Frame Crash

NRDAX-T0146 - Malformed HTTP Header Parsing Crash

2020-01-01T00:00:00Z

Malformed HTTP Header Parsing Crash

NRDAX-T0138 - Leader Election Manipulation Panic

2020-01-01T00:00:00Z

Leader Election Manipulation Panic

NRDAX-T0137 - Latent Consensus Decision Panic

2020-01-01T00:00:00Z

Latent Consensus Decision Panic

NRDAX-T0136 - Large Trie Commit Batch Panic Crash

2020-01-01T00:00:00Z

Large Trie Commit Batch Panic Crash

NRDAX-T0134 - JSON Deserialization RCE

2020-01-01T00:00:00Z

JSON Deserialization RCE

NRDAX-T0133 - Iterator Length Mismatch Panic

2020-01-01T00:00:00Z

Iterator Length Mismatch Panic

NRDAX-T0132 - Invariant Check Spam CPU Exhaustion

2020-01-01T00:00:00Z

Invariant Check Spam CPU Exhaustion

NRDAX-T0128 - Invalid Commit Signature Halt

2020-01-01T00:00:00Z

Invalid Commit Signature Halt

NRDAX-T0127 - Invalid Address Nil-Pointer Crash

2020-01-01T00:00:00Z

Invalid Address Nil-Pointer Crash

NRDAX-T0121 - Integer Overflow Parsing Crash

2020-01-01T00:00:00Z

Integer Overflow Parsing Crash

NRDAX-T0117 - Index Out-Of-Bounds Panic Crash

2020-01-01T00:00:00Z

Index Out-Of-Bounds Panic Crash

NRDAX-T0115 - Implementation Divergence Chain Split

2020-01-01T00:00:00Z

Implementation Divergence Chain Split

NRDAX-T0113 - IBC Timeout Callback Reentrancy

2020-01-01T00:00:00Z

IBC Timeout Callback Reentrancy

NRDAX-T0110 - HTTP Header Spoofing Trust Bypass

2020-01-01T00:00:00Z

HTTP Header Spoofing Trust Bypass

NRDAX-T0108 - HTLC Replay Init Order Crash

2020-01-01T00:00:00Z

HTLC Replay Init Order Crash

NRDAX-T0105 - Hash Function Overflow Misbehavior

2020-01-01T00:00:00Z

Hash Function Overflow Misbehavior

NRDAX-T0103 - Handshake Version String Crash

2020-01-01T00:00:00Z

Handshake Version String Crash

NRDAX-T0096 - GraphQL Nested Query Depth CPU Exhaustion

2020-01-01T00:00:00Z

GraphQL Nested Query Depth CPU Exhaustion

NRDAX-T0094 - Governance Proposal Panic Halt

2020-01-01T00:00:00Z

Governance Proposal Panic Halt

NRDAX-T0093 - Gossipsub Mcache Config Panic Crash

2020-01-01T00:00:00Z

Gossipsub Mcache Config Panic Crash

NRDAX-T0092 - Gossip Query Triggered DB Crash

2020-01-01T00:00:00Z

Gossip Query Triggered DB Crash

NRDAX-T0091 - Gossip Message Quarantine Crash

2020-01-01T00:00:00Z

Gossip Message Quarantine Crash

NRDAX-T0090 - Gossip Message Deadlock Stall

2020-01-01T00:00:00Z

Gossip Message Deadlock Stall

NRDAX-T0089 - Gossip Attestation Index OOM

2020-01-01T00:00:00Z

Gossip Attestation Index OOM

NRDAX-T0087 - Genesis Migration Timing Panic

2020-01-01T00:00:00Z

Genesis Migration Timing Panic

NRDAX-T0086 - Gas Price Margin Integer Overflow

2020-01-01T00:00:00Z

Gas Price Margin Integer Overflow

NRDAX-T0085 - Gas Limit Capacity Exhaustion

2020-01-01T00:00:00Z

Gas Limit Capacity Exhaustion

NRDAX-T0084 - Gas Accounting Panic Bypass

2020-01-01T00:00:00Z

Gas Accounting Panic Bypass

NRDAX-T0082 - Forged Commit Future Height Light Client Attack

2020-01-01T00:00:00Z

Forged Commit Future Height Light Client Attack

NRDAX-T0081 - Force-Retire Integer Overflow Crash

2020-01-01T00:00:00Z

Force-Retire Integer Overflow Crash

NRDAX-T0077 - Fast Sync Pivot Failure Abort

2020-01-01T00:00:00Z

Fast Sync Pivot Failure Abort

NRDAX-T0069 - Equivocation Storm Liveness DoS

2020-01-01T00:00:00Z

Equivocation Storm Liveness DoS

NRDAX-T0068 - Equivocation Evidence Window Bypass

2020-01-01T00:00:00Z

Equivocation Evidence Window Bypass

NRDAX-T0067 - Epoch Height Source Lag Stall

2020-01-01T00:00:00Z

Epoch Height Source Lag Stall

NRDAX-T0066 - Epoch Boundary Crash Loop

2020-01-01T00:00:00Z

Epoch Boundary Crash Loop

NRDAX-T0065 - Engine API Deadlock

2020-01-01T00:00:00Z

Engine API Deadlock

NRDAX-T0058 - Duplicate Record Constraint Crash

2020-01-01T00:00:00Z

Duplicate Record Constraint Crash

NRDAX-T0057 - Duplicate Proof Memory Leak DoS

2020-01-01T00:00:00Z

Duplicate Proof Memory Leak DoS

NRDAX-T0054 - DNSSEC Validation Bypass Cache Poisoning

2020-01-01T00:00:00Z

DNSSEC Validation Bypass Cache Poisoning

NRDAX-T0053 - DNS Response Parsing Panic Crash

2020-01-01T00:00:00Z

DNS Response Parsing Panic Crash

NRDAX-T0052 - DNS Rebinding SSRF Bypass

2020-01-01T00:00:00Z

DNS Rebinding SSRF Bypass

NRDAX-T0051 - Dial Worker Panic Crash

2020-01-01T00:00:00Z

Dial Worker Panic Crash

NRDAX-T0047 - Default Secret Token Forgery

2020-01-01T00:00:00Z

Default Secret Token Forgery

NRDAX-T0045 - Declare Transaction Compilation CPU Exhaustion

2020-01-01T00:00:00Z

Declare Transaction Compilation CPU Exhaustion

NRDAX-T0043 - Crypto Input Panic Crash

2020-01-01T00:00:00Z

Crypto Input Panic Crash

NRDAX-T0039 - Crafted Packet Node Crash

2020-01-01T00:00:00Z

Crafted Packet Node Crash

NRDAX-T0036 - Contract Execution Engine Crash

2020-01-01T00:00:00Z

Contract Execution Engine Crash

NRDAX-T0035 - Contract Activation Compute Exhaustion

2020-01-01T00:00:00Z

Contract Activation Compute Exhaustion

NRDAX-T0033 - Consensus Message Crash DoS

2020-01-01T00:00:00Z

Consensus Message Crash DoS

NRDAX-T0032 - Consensus Future Vote OOM

2020-01-01T00:00:00Z

Consensus Future Vote OOM

NRDAX-T0031 - Consensus Deadlock Vote Race

2020-01-01T00:00:00Z

Consensus Deadlock Vote Race

NRDAX-T0030 - Connection Failure Panic Crash

2020-01-01T00:00:00Z

Connection Failure Panic Crash

NRDAX-T0029 - Concurrent RPC Race Nil-Deref Panic

2020-01-01T00:00:00Z

Concurrent RPC Race Nil-Deref Panic

NRDAX-T0027 - Compressed Message Checksum Bypass

2020-01-01T00:00:00Z

Compressed Message Checksum Bypass

NRDAX-T0020 - Checkpoint Snapshot Signer Bypass

2020-01-01T00:00:00Z

Checkpoint Snapshot Signer Bypass

NRDAX-T0019 - Channel Open Error Bypass

2020-01-01T00:00:00Z

Channel Open Error Bypass

NRDAX-T0018 - Channel Close State Race Stranding

2020-01-01T00:00:00Z

Channel Close State Race Stranding

NRDAX-T0016 - ChainSync Jumping Protocol DoS

2020-01-01T00:00:00Z

ChainSync Jumping Protocol DoS

NRDAX-T0014 - Certificate Revocation Bypass

2020-01-01T00:00:00Z

Certificate Revocation Bypass

NRDAX-T0012 - Block Timestamp Validation Bypass

2020-01-01T00:00:00Z

Block Timestamp Validation Bypass

NRDAX-T0011 - Block Replay Race Crash

2020-01-01T00:00:00Z

Block Replay Race Crash

NRDAX-T0010 - Block Processing Use-After-Free Crash

2020-01-01T00:00:00Z

Block Processing Use-After-Free Crash

NRDAX-T0009 - Bit-Length Validation Panic

2020-01-01T00:00:00Z

Bit-Length Validation Panic

NRDAX-T0004 - Arithmetic Edge-Case Panic Crash

2020-01-01T00:00:00Z

Arithmetic Edge-Case Panic Crash

NRDAX-T0378 - ZK Proof Forgery Acceptance

2019-01-01T00:00:00Z

ZK Proof Forgery Acceptance

NRDAX-T0269 - Signature Verification Bypass

2019-01-01T00:00:00Z

Signature Verification Bypass

NRDAX-T0141 - Low-Fee Transaction Spam Flood

2019-01-01T00:00:00Z

Low-Fee Transaction Spam Flood

NRDAX-T0107 - Headers Message Flood OOM

2019-01-01T00:00:00Z

Headers Message Flood OOM

NRDAX-T0046 - Decompression Bomb Resource Exhaustion

2019-01-01T00:00:00Z

quic-go HTTP/3 QPACK decompression-bomb memory exhaustion (CVE-2025-64702): a flood of QUIC v1 short-header (1-RTT) packets, each carrying a STREAM frame (type 0x0b) on a fresh client bidi stream whos

NRDAX-T0034 - Container Escape via Dependency

2019-01-01T00:00:00Z

Container Escape via Dependency

NRDAX-T0017 - Channel Access Control Bypass

2019-01-01T00:00:00Z

Channel Access Control Bypass

NRDAX-T0005 - Array Deserialization Memcpy Corruption

2019-01-01T00:00:00Z

CVE-2018-3972 (TALOS-2018-0637): Levin array-of-arrays (0x8D) → epee read_ae POD memcpy → memory corruption

NRDAX-T0347 - Unsafe Deserialization Memory Corruption

2018-01-01T00:00:00Z

Unsafe Deserialization Memory Corruption

NRDAX-T0337 - Unexploitable Dependency Vulnerability

2018-01-01T00:00:00Z

Unexploitable Dependency Vulnerability

NRDAX-T0317 - Unauthenticated Admin Interface Exposure

2018-01-01T00:00:00Z

Black Valentine (SlowMist Blockchain Common Vulnerability List): geth --http with the personal namespace exposed + an unlocked/unlockable account → remote unauthenticated personal_unlockAccount then e

NRDAX-T0260 - RPC Parameter Validation Defect

2018-01-01T00:00:00Z

RPC Parameter Validation Defect

NRDAX-T0163 - Mining Pool Auth Bypass

2018-01-01T00:00:00Z

Mining Pool Auth Bypass

NRDAX-T0125 - Inv Message Flood OOM

2018-01-01T00:00:00Z

Inv Message Flood OOM

NRDAX-T0120 - Integer-Overflow Panic Control Message

2018-01-01T00:00:00Z

CVE-2026-34219 (+CVE-2026-33040): gossipsub ControlPrune backoff≈u64::MAX → Instant/Duration overflow panic

NRDAX-T0055 - Duplicate-Input Block Crash

2018-01-01T00:00:00Z

Duplicate-Input Block Crash

NRDAX-T0279 - SOCKS Proxy Remote Code Execution

2017-01-01T00:00:00Z

SOCKS Proxy Remote Code Execution

NRDAX-T0158 - Merkle Proof Forgery

2017-01-01T00:00:00Z

Merkle Proof Forgery

NRDAX-T0109 - HTTP API Connection Hang DoS

2017-01-01T00:00:00Z

HTTP API Connection Hang DoS

NRDAX-T0319 - Unbounded Alert Map OOM

2016-01-01T00:00:00Z

Unbounded Alert Map OOM

NRDAX-T0002 - Alert Message Ordering Bypass

2016-01-01T00:00:00Z

Alert Message Ordering Bypass

NRDAX-T0357 - UPnP Response Buffer Overflow

2015-01-01T00:00:00Z

UPnP Response Buffer Overflow

NRDAX-T0303 - TLS Handshake MITM Injection

2014-01-01T00:00:00Z

TLS Handshake MITM Injection

NRDAX-T0150 - Malformed SOCKS Response Infinite Loop

2013-01-01T00:00:00Z

Malformed SOCKS Response Infinite Loop