POC Details: c14fc60de6cf4a4e7e02d65bccedd996e45aa0e6

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/misconfiguration/blockchain-rpc-txpool-exposed.yaml

Associated Vulnerability

Likely 0-day

Description

The blockchain RPC endpoint exposes the txpool_content method, which returns all pending (unmined) transactions in the mempool including sender addresses, transaction data, gas prices, and values. This enables frontrunning attacks, sandwich attacks, and other MEV (Maximal Extractable Value) exploitation against users.

File Snapshot


 id: blockchain-rpc-txpool-exposed

info:
  name: Blockchain RPC - txpool_content Exposed
  author: P

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.