CVE-2026-67581: Mpp Evm Unverified Transaction Replay

EVM transaction verification checks transaction hash settlement against charge parameters without verifying that the transaction hash is unused or committing it to a deduplication store, allowing capture-replay attacks.

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Elixir
greprules fetch cve-2026-67581-mpp-evm-unverified-transaction-replay --engine opengrep

Description

EVM transaction verification checks transaction hash settlement against charge parameters without verifying that the transaction hash is unused or committing it to a deduplication store, allowing capture-replay attacks.