NRDAX-T0342 - Unindexed Account Scan CPU Amplification
compute_amp · active · first seen 2026-06-30
provenance: Reproduced in NullRabbit's attack-reproduction pipeline
mechanism
E28/SOL_P07: getProgramAccounts filter-miss CPU scan (agave rpc.rs:2235-2251)
instances (3)
| chain | primitive | fidelity | origin | reproducer (bundle) | source |
|---|---|---|---|---|---|
| solana | sol_getblocks_enum_scan | lab | NullRabbit Labs | sol_getblocks_enum_scan | github.com ↗ |
| solana | sol_gpa_compute_scan | lab | NullRabbit Labs | sol_gpa_compute_scan | github.com ↗ |
| sui | sui_p07_getownedobjects_scan | lab | NullRabbit Labs | sui_p07_getownedobjects_scan | github.com ↗ |
related (compute_amp)
NRDAX-T0005 - Array Deserialization Memcpy Corruption active NRDAX-T0006 - Async Runtime Blocking VM Execution active NRDAX-T0013 - Bloom Filter Divide-By-Zero Crash active NRDAX-T0076 - Expensive Debug RPC Compute Amplification active NRDAX-T0101 - Handshake Crypto Validation Bypass Crash active NRDAX-T0122 - Integer Signedness Index OOB Crash active NRDAX-T0129 - Invalid Curve Point Panic active NRDAX-T0139 - Legacy Sighash Quadratic CPU Blowup active
cite
https://nrdax.com/techniques/NRDAX-T0342
plain
NRDAX Registry. Technique NRDAX-T0342.
bibtex
@misc{nrdax_NRDAX_T0342,
title = {Unindexed Account Scan CPU Amplification (NRDAX-T0342)},
howpublished = {NRDAX Registry},
url = {https://nrdax.com/techniques/NRDAX-T0342},
} json (csl)
{
"id": "nrdax-NRDAX-T0342",
"type": "dataset",
"title": "Unindexed Account Scan CPU Amplification (NRDAX-T0342)",
"URL": "https://nrdax.com/techniques/NRDAX-T0342",
"publisher": "NRDAX Registry"
}