NRDAX-T0312 - Tx-Relay Throughput Jamming
Pending classification · active · first seen 2026-07-01
Producer label: gossip_abuse. Not yet assigned a mechanism family.
provenance: Reproduced in NullRabbit's attack-reproduction pipeline
mechanism
CVE-2024-55563 (Bitcoin Core <= 27.2): transaction-relay jamming via an off-chain protocol attack ('Transaction-Relay Throughput Overflow Attacks against Off-Chain Protocols'; related to CVE-2024-52913). High-overflow variant: a flood of many small higher-feerate txs + their inv announcements overflows the fee-rate-sorted forward-transaction inventory (INVENTORY_BROADCAST_MAX / CompareInvMempoolOrder), so a lower-feerate pre-signed Lightning HTLC/commitment tx is never announced (jammed) before its timelock expires -> HTLC outcome changed.
live exposure
No exposure data. Slashr ↗ has no risk signal mapped to this technique yet — absence of data is not absence of exposure.
instances (2)
| chain | primitive | fidelity | origin | reproducer (bundle) | source |
|---|---|---|---|---|---|
| bitcoin | bitcoin_tx_relay_jamming | lab | reverse-engineered-cve | bitcoin_tx_relay_jamming | CVE-2024-55563 ↗ |
| bitcoin | btc_inv_eviction_jam | lab | reverse-engineered-cve | btc_inv_eviction_jam | bitcoincore.org ↗ |
cite
https://nrdax.com/techniques/NRDAX-T0312
NRDAX Registry. Technique NRDAX-T0312.
@misc{nrdax_NRDAX_T0312,
title = {Tx-Relay Throughput Jamming (NRDAX-T0312)},
howpublished = {NRDAX Registry},
url = {https://nrdax.com/techniques/NRDAX-T0312},
} {
"id": "nrdax-NRDAX-T0312",
"type": "dataset",
"title": "Tx-Relay Throughput Jamming (NRDAX-T0312)",
"URL": "https://nrdax.com/techniques/NRDAX-T0312",
"publisher": "NRDAX Registry"
} [](https://nrdax.com/techniques/NRDAX-T0312-tx-relay-throughput-jamming)
use from the CLI
Retrieve or cite this technique from a script or the terminal with the NRDAX Python library & CLI.
nrdax get NRDAX-T0312 nrdax cite NRDAX-T0312 --format bibtex