Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-54427— Polkadot Frontier contains missing `check_inherent` for `note_min_gas_price_target` inflates gas price

Quick assessment

Affected
polkadot-evm frontier
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Polkadot Frontier是Polkadot EVM开源的一个提供以太坊虚拟机兼容层的应用程序。 Polkadot Frontier a754b3d之前版本存在代码问题漏洞，该漏洞源于未实现note_min_gas_price_target的check_inherent函数，可能导致Gas价格操纵。

AI Predicted 5.3 Difficulty: Hard EPSS 0.57% · P46

Possible ATT&CK Techniques 1 AI

T1498 · Network Denial of Service
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-54427

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Polkadot Frontier contains missing `check_inherent` for `note_min_gas_price_target` inflates gas price
Source: CVE Program / CVE List V5
Vulnerability Description
Polkadot Frontier is an Ethereum and EVM compatibility layer for Polkadot and Substrate. The extrinsic note_min_gas_price_target is an inherent extrinsic, meaning only the block producer can call it. To ensure correctness, the ProvideInherent trait should be implemented for each inherent, which includes the check_inherent call. This allows other nodes to verify if the input (in this case, the target value) is correct. However, prior to commit a754b3d, the check_inherent function has not been implemented for note_min_gas_price_target. This lets the block producer set the target value without verification. The target is then used to set the MinGasPrice, which has an upper and lower bound defined in the on_initialize hook. The block producer can set the target to the upper bound. Which also increases the upper and lower bounds for the next block. Over time, this could result in continuously raising the gas price, making contract execution too expensive and ineffective for users. An attacker could use this flaw to manipulate the gas price, potentially leading to significantly inflated transaction fees. Such manipulation could render contract execution prohibitively expensive for users, effectively resulting in a denial-of-service condition for the network. This is fixed in version a754b3d.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
数值计算不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Polkadot Frontier 代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Polkadot Frontier是Polkadot EVM开源的一个提供以太坊虚拟机兼容层的应用程序。 Polkadot Frontier a754b3d之前版本存在代码问题漏洞，该漏洞源于未实现note_min_gas_price_target的check_inherent函数，可能导致Gas价格操纵。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
polkadot-evm frontier < a754b3d -

II. Public POCs for CVE-2025-54427

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-54427

请登录查看更多情报信息。

Same Patch Batch · polkadot-evm · 2025-07-28 · 3 CVEs total

CVE-2025-54426 Polkadot Frontier contains silent failure in Curve25519 arithmetic precompiles with malfor
CVE-2025-54429 Polkadot Frontier's constructing smart contract can bypass precompile address bounding

IV. Related Vulnerabilities

Same product: frontier
Same vendor: polkadot-evm
Same weakness: CWE-682

V. Comments for CVE-2025-54427

No comments yet

Leave a comment