CVE-2022-35913

Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin. The attacker and victim must follow each other's paynym. Then, the victim must try to collaborate with the attacker for a Stonewallx2 transaction. Next, the attacker broadcasts a tx, spending the inputs used in...

Code injection

Samourai Wallet Stonewallx2 0.99.98e allows a denial of service via a P2P coinjoin. The attacker and victim must follow each other's paynym. Then, the victim must try to collaborate with the attacker for a Stonewallx2 transaction. Next, the attacker broadcasts a tx, spending the inputs used in...

CVE-2022-35913

Summary: CVE-2022-35913 affects Samourai Wallet Stonewallx2 0.99.98e and enables a denial-of-service in P2P coinjoin flows. What’s vulnerable: Stonewallx2 implementation in Samourai Wallet; the attack requires both peers to follow each other’s paynym and for the victim to attempt a Stonewallx2 tr...