CyberRota Analysis
AI-GeneratedA vulnerability in the Nimiq Rust implementation allows remote attackers to exploit a flaw in the validity store, enabling them to replay signed transactions within a specific block window. This can result in the unauthorized updating of sender and recipient balances, potentially leading to financial loss. Organizations using versions prior to 1.5.1 should prioritize this issue to mitigate the risk of transaction replay attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Nimiq is a Rust implementation of the Nimiq Proof-of-Stake protocol based on the Albatross consensus algorithm. Through 1.5.0, the validity store uses a strict lower-bound comparison that expires a stored transaction too early relative to Transaction::is_valid_at, allowing a remote attacker to replay the same signed transaction during a blocks_per_batch minus one block window and cause the sender and recipient balances to be updated twice. This issue is fixed in version 1.5.1.