Executive brief
ckb: Large dep group requires a lot of resources to process but the cost to commit the transaction is very low.
Affected products
- crates.io ckb
Junglewise Threat Intelligence
ckb: Large dep group requires a lot of resources to process but the cost to commit the transaction is very low.
Severity: info · Published 2022-11-02
Technologies: ckb (crates.io). Vendors: crates.io.
Related threats
- Nervos CKB Pool does not remove the conflicting transactions from the statistics
- Nervos CKB Transaction which calls syscall load_cell_data_hash has nondeterministic result
- Nervos CKB Snappy decompress length can be very large and causes out of memory error
- Nervos CKB Panic on malformed input
- Nervos CKB BlockTimeTooNew should not be considered as invalid block