🎯 New Report #3700036: SpendProofV1 txid-substitution: get spend proof/check spend proof do not verify returned transaction hash
🔺Severity: Medium
👽 Reporter: bebensap
⭐️ Reputation: 1026
🛠 State: resolved
💼 Team: Monero
💵 Bounty: null
🕐 Submitted: 2026-04-28
⏰ Disclosed: 2026-08-05 10:23:21
📝 Summary: A vulnerability was discovered in the Monero project where the get spend proof and check spend proof functions do not verify the returned transaction hash against the requested transaction ID. This allows a malicious or compromised daemon to provide a valid serialized transaction body for a different transaction than the one requested, which can be used to create or verify a spend proof for that different transaction.
📂 Report JSON File: 3700036
@hackeronereports