NRDAX-T0001 - Addr Message Counter Overflow Crash
Fault termination · P2P and gossip · absent invariant · active · first seen 2024-01-01
provenance: Reproduced in NullRabbit's attack-reproduction pipeline
mechanism
CVE-2024-52919 (GHSA-qwp9-p9rr-h729): addr flood → CAddrMan 32-bit nIdCount overflow → assertion abort
live exposure
24 validators presently exposed · $271.3M aggregate stake · solana
Live figures from Slashr ↗, as of 2026-08-28. Aggregate only; validators are named on Slashr, not here.
instances (1)
| chain | primitive | fidelity | origin | reproducer (bundle) | source |
|---|---|---|---|---|---|
| litecoin | btc_addr_overflow_flood | lab | reverse-engineered-cve | btc_addr_overflow_flood | CVE-2024-52919 ↗ |
references
cve: CVE-2024-52919
related (Fault termination)
NRDAX-T0005 - Array Deserialization Memcpy Corruption active NRDAX-T0013 - Bloom Filter Divide-By-Zero Crash active NRDAX-T0024 - Compact Block FillBlock Duplicate Crash active NRDAX-T0056 - Duplicate Input Validation-Bypass Crash active NRDAX-T0101 - Handshake Crypto Validation Bypass Crash active NRDAX-T0120 - Integer-Overflow Panic Control Message active NRDAX-T0122 - Integer Signedness Index OOB Crash active NRDAX-T0129 - Invalid Curve Point Panic active
cite
https://nrdax.com/techniques/NRDAX-T0001
plain
NRDAX Registry. Technique NRDAX-T0001.
bibtex
@misc{nrdax_NRDAX_T0001,
title = {Addr Message Counter Overflow Crash (NRDAX-T0001)},
howpublished = {NRDAX Registry},
url = {https://nrdax.com/techniques/NRDAX-T0001},
} json (csl)
{
"id": "nrdax-NRDAX-T0001",
"type": "dataset",
"title": "Addr Message Counter Overflow Crash (NRDAX-T0001)",
"URL": "https://nrdax.com/techniques/NRDAX-T0001",
"publisher": "NRDAX Registry"
} badge
[](https://nrdax.com/techniques/NRDAX-T0001-addr-message-counter-overflow-crash)
use from the CLI
Retrieve or cite this technique from a script or the terminal with the NRDAX Python library & CLI.
nrdax get NRDAX-T0001nrdax cite NRDAX-T0001 --format bibtex