NRDAX-T0202 - Peer Timestamp Skew Manipulation

Pending classification · active · first seen 2026-07-08

Producer label: consensus_abuse. Not yet assigned a mechanism family.

provenance: Reproduced in NullRabbit's attack-reproduction pipeline

mechanism

Timejacking (SlowMist Blockchain Common Vulnerability List; Culubas 2011): N peers advertise a version.timestamp skewed ~+70min (inside the AddTimeData ±70min acceptance window) → each peer's derived time-offset drags the node's median network-adjusted time → block-time (nTime/MTP) validation clock drift → stale-tip / block-rejection isolation. SlowMist gap class; no CVE.

live exposure

No exposure data. Slashr ↗ has no risk signal mapped to this technique yet — absence of data is not absence of exposure.

instances (1)

chain	primitive	fidelity	origin	reproducer (bundle)	source
bitcoin	timejacking_peer_time_skew	lab	reverse-engineered-cve	timejacking_peer_time_skew	github.com ↗

cite

https://nrdax.com/techniques/NRDAX-T0202

plain

NRDAX Registry. Technique NRDAX-T0202.

bibtex

@misc{nrdax_NRDAX_T0202,
  title = {Peer Timestamp Skew Manipulation (NRDAX-T0202)},
  howpublished = {NRDAX Registry},
  url = {https://nrdax.com/techniques/NRDAX-T0202},
}

json (csl)

{
  "id": "nrdax-NRDAX-T0202",
  "type": "dataset",
  "title": "Peer Timestamp Skew Manipulation (NRDAX-T0202)",
  "URL": "https://nrdax.com/techniques/NRDAX-T0202",
  "publisher": "NRDAX Registry"
}

badge

[![NRDAX-T0202 in the NRDAX registry](https://nrdax.com/badge/NRDAX-T0202.svg)](https://nrdax.com/techniques/NRDAX-T0202-peer-timestamp-skew-manipulation)

use from the CLI

Retrieve or cite this technique from a script or the terminal with the NRDAX Python library & CLI.

Retrieve this technique

nrdax get NRDAX-T0202

Cite it (BibTeX)

nrdax cite NRDAX-T0202 --format bibtex

CLI guide → GitHub ↗