High severity7.5OSV Advisory· Published May 9, 2018· Updated Jun 17, 2026
CVE-2018-10831
CVE-2018-10831
Description
Z-NOMP before 2018-04-05 has an incorrect Equihash solution verifier that allows attackers to spoof mining shares, as demonstrated by providing a solution with {x1=1,x2=1,x3=1,...,x512=1} to bypass this verifier for any blockheader. This originally affected (for example) the Bitcoin Gold and Zcash cryptocurrencies, and continued to be exploited in the wild in May 2018 against smaller cryptocurrencies.
Affected products
3Patches
Vulnerability mechanics
References
2- github.com/edwardz246003/misc/blob/master/Attackers%20Fake%20Computational%20Power%20to%20Steal%20Cryptocurrencies%20from%20Mining%20Pools.mdnvdExploitTechnical DescriptionThird Party Advisory
- blog.zencash.com/update-for-the-equihash-mining-application-z-nomp/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.