CyberRota Analysis
AI-GeneratedZebra versions prior to 6.1.0 are vulnerable due to an incorrect calculation in the ZIP-317 block template selector, which fails to account for header and transaction-count sizes in the block budget. This flaw allows attackers to manipulate a victim miner's mempool by introducing valid transactions, potentially leading to oversized blocks that are rejected, resulting in wasted proof-of-work resources. Miners and organizations utilizing Zebra should prioritize updating to mitigate this risk.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Zebra before 6.1.0 contains an incorrect calculation vulnerability in its ZIP-317 block template selector that omits header and transaction-count size from the block budget. Attackers can place valid selectable transactions in a victim miner's mempool to shape templates into oversized blocks, causing rejection and wasted proof-of-work.