Lucene search
+L

1 matches found

Hacker One
Hacker One
•added 2026/05/07 8:50 p.m.•6 views

Monero: `monero-wallet-rpc::rescan_spent` accepts daemon-supplied spent-status from an untrusted daemon, enabling ring-intersection attack on transactions

A vulnerability was discovered in the wallet RPC server's rescan spent handler, which failed to verify daemon trustworthiness before accepting spent-status information. The handler invoked the rescan spent function without checking the istrusteddaemon flag, unlike all other callers of the same...

5.9AI score
SaveExploits0
Rows per page
Query Builder