NRDAX-T0139 - Legacy Sighash Quadratic CPU Blowup
Compute amplification · Consensus ingest · no bound · active · first seen 2026-07-01
provenance: Reproduced in NullRabbit's attack-reproduction pipeline
mechanism
CVE-2025-46598: non-standard tx with many legacy-sighash inputs → quadratic validation CPU, no peer penalty
live exposure
No exposure data. Slashr ↗ has no risk signal mapped to this technique yet — absence of data is not absence of exposure.
instances (2)
| chain | primitive | fidelity | origin | reproducer (bundle) | source |
|---|---|---|---|---|---|
| bitcoin | btc_tx_quad_sighash | lab | reverse-engineered-cve | btc_tx_quad_sighash | CVE-2025-46598 ↗ |
| namada | namada_tx_repeated_sections_hash_blowup | lab | reverse-engineered-cve | namada_tx_repeated_sections_hash_blowup | - |
related (Compute amplification)
NRDAX-T0006 - Async Runtime Blocking VM Execution active NRDAX-T0076 - Expensive Debug RPC Compute Amplification active NRDAX-T0088 - GetData Request Flood active NRDAX-T0100 - Handshake Crypto CPU Burn active NRDAX-T0143 - Malformed Field Gossip Before Validation active NRDAX-T0148 - Malformed KZG Proof Mismatch DoS active NRDAX-T0166 - Move Verifier Fixpoint CPU Exhaustion active NRDAX-T0184 - Orphan Tx Resolution CPU Amplification active
cite
https://nrdax.com/techniques/NRDAX-T0139
plain
NRDAX Registry. Technique NRDAX-T0139.
bibtex
@misc{nrdax_NRDAX_T0139,
title = {Legacy Sighash Quadratic CPU Blowup (NRDAX-T0139)},
howpublished = {NRDAX Registry},
url = {https://nrdax.com/techniques/NRDAX-T0139},
} json (csl)
{
"id": "nrdax-NRDAX-T0139",
"type": "dataset",
"title": "Legacy Sighash Quadratic CPU Blowup (NRDAX-T0139)",
"URL": "https://nrdax.com/techniques/NRDAX-T0139",
"publisher": "NRDAX Registry"
} badge
[](https://nrdax.com/techniques/NRDAX-T0139-legacy-sighash-quadratic-cpu-blowup)
use from the CLI
Retrieve or cite this technique from a script or the terminal with the NRDAX Python library & CLI.
nrdax get NRDAX-T0139nrdax cite NRDAX-T0139 --format bibtex