AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 44 Cryptographic libraries

Daemon: relay empty fluffy block on found block

Public commit record

What the developer wrote

Authored by j-berman

45/100 · Thin
Daemon: relay empty fluffy block on found block
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
The short version

What changed, and why it matters

This commit changes how a Monero node announces a newly found block to peers. Previously, the node would fetch and attach the actual transaction data to the announcement. After the change, it sends an 'empty fluffy block' announcement that contains only the block header and a list of transaction hashes, leaving peers to request missing transactions themselves. This is a network-efficiency optimization, but it removes a local consistency check and shifts responsibility for transaction availability to peers.

Recommended action

Review whether the remaining have_tx() loop and the removed size assertion are sufficient to prevent a miner from relaying a block it cannot fully validate. Consider adding a check that the node actually has all transactions referenced by the block before relaying, or ensure that fluffy-block handling on peers robustly falls back to requesting the full block when transactions are missing.

Security signals we found

01

Removal of local transaction presence assertion before relay

02

Change from full-block relay to empty fluffy-block relay on newly found blocks

03

Reduced local validation/availability guarantee propagated to the network

04

Potential for a mining node to announce a block whose transactions it does not itself possess

Risk score

Why this scored 44/100

Our methodology →
Potential impact 12/30
Exploitability 8/25
Stealth signal 6/15
Affected reach 10/15
Confidence 5/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.