Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38689
HistoryDec 30, 2022 - 9:12 a.m.

Cross-Chain Transaction Replay Attack

2022-12-3009:12:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
elrondnetwork
vulnerability
cross-chain
transaction replay
basepreprocess.go
smart contract

0.001 Low

EPSS

Percentile

42.4%

github.com/elrondnetwork/elrond-go is vulnerable to cross chain transaction reply. The vulnerability exists in the computeExistingAndRequestMissing function in basePreProcess.go because it is subject to a processing issue where nodes are affected when trying to process a cross-shard relayed transaction with a smart contract deploy transaction data.

0.001 Low

EPSS

Percentile

42.4%