NRDAX-T0307 - Transaction Malleability

Pending classification · active · first seen 2026-07-09

Producer label: consensus_abuse. Not yet assigned a mechanism family.

provenance: Reproduced in NullRabbit's attack-reproduction pipeline

mechanism

Transaction Malleability (SlowMist Blockchain Common Vulnerability List): a tx and a malleated sibling with a byte-different scriptSig (extra OP_NOP) → different txid, identical inputs/outputs/effect; relaying both lets the mutant confirm under a new txid, breaking original-txid tracking (classic pre-SegWit malleability). SlowMist gap class; no CVE.

live exposure

No exposure data. Slashr ↗ has no risk signal mapped to this technique yet — absence of data is not absence of exposure.

instances (3)

chain	primitive	fidelity	origin	reproducer (bundle)	source
bitcoin	tx_malleability_txid_mutate	lab	reverse-engineered-cve	tx_malleability_txid_mutate	github.com ↗
zcash	zcash_zebra_tx_cache_consensus_split	lab	reverse-engineered-cve	zcash_zebra_tx_cache_consensus_split	GHSA-3vmh-33xr-9cqh ↗
zcash	zebra_block_sent_hash_poisoning	lab	reverse-engineered-cve	zebra_block_sent_hash_poisoning	-

cite

https://nrdax.com/techniques/NRDAX-T0307

plain

NRDAX Registry. Technique NRDAX-T0307.

bibtex

@misc{nrdax_NRDAX_T0307,
  title = {Transaction Malleability (NRDAX-T0307)},
  howpublished = {NRDAX Registry},
  url = {https://nrdax.com/techniques/NRDAX-T0307},
}

json (csl)

{
  "id": "nrdax-NRDAX-T0307",
  "type": "dataset",
  "title": "Transaction Malleability (NRDAX-T0307)",
  "URL": "https://nrdax.com/techniques/NRDAX-T0307",
  "publisher": "NRDAX Registry"
}

badge

[![NRDAX-T0307 in the NRDAX registry](https://nrdax.com/badge/NRDAX-T0307.svg)](https://nrdax.com/techniques/NRDAX-T0307-transaction-malleability)

use from the CLI

Retrieve or cite this technique from a script or the terminal with the NRDAX Python library & CLI.

Retrieve this technique

nrdax get NRDAX-T0307

Cite it (BibTeX)

nrdax cite NRDAX-T0307 --format bibtex

CLI guide → GitHub ↗