-
from @ralexstokes
```Nim
INF 2020-10-08 22:29:36.915+00:00 Using random network key topics="networking" tid=130501 file=eth2_network.nim:1219 network_public_key=08021221024a25ef2…
-
Severity: High
Difficulty: High
## Description
An incorrect check leads the linked list used in the slashing protection to insert blocks at an incorrect location. As a result, the surrounding att…
-
Our `--network` argument is optional without any defaults, all other clients will connect to `mainnet` if `--network` was not specified explicitly.
-
Severity: Medium
Difficulty: High
## Description
An incorrect check done to detect surrounded vote leads to classifying valid attestations as malicious.
When checking for a surrounded vote, an…
-
Severity: Medium
Difficulty: Low
## Description
Attestations are never saved in the database for the beacon node. As a result the attestation slashing protection is ineffective.
The attestatio…
-
Severity: Medium
Difficulty: Medium
## Description
The code iterates over the nodes using the set operation. The operation fails if the set contains more than 65535 elements. As a result an attac…
-
Difficulty: Low
Severity: High
## Description
A lack of signatures validation on unresolved attestations allows an attacker to send malicious attestations.
When an attestation is received, it …
-
Severity: Low
Difficulty: High
## Description
An unchecked overflow in `beaconstate.check_attestation_inclusion` can lead the first epoch to accept incorrect attestations.
When receiving an at…
-
Severity: Low
Difficulty: Low
## Description
A key mapping collision allows attackers to replace legitimate quarantined blocks with malicious block
When a block is received, it is checked with…
-
Severity: High
Difficulty: Low
## Description
A key mapping collision allows attackers to replace legitimate queued attestations with malicious attestations.
When an attestation is related to …